vportal Disk Savvy Enterprise 9.1.14 - 'GET' Remote Buffer Overflow
remote windows

Pabstersac Xfinity Gateway - Cross-Site Request Forgery
webapps hardware

Kacper Szurek WinPower 4.9.0.4 - Local Privilege Escalation
local windows

Mediaservice.net Srl. Red Hat JBoss EAP - Deserialization of Untrusted Data
webapps java 8080 CVE-2016-7065

Magnus Klaaborg Stubman NTP 4.2.8p3 - Denial of Service
dos linux CVE-2015-7855

FireFart Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)
local linux CVE-2016-5195

Vulnerability-Lab Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting
webapps hardware

Gabriele Bonacini Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)
local linux CVE-2016-5195

hyp3rlinx Core FTP LE 2.2 - 'SSH/SFTP' Remote Buffer Overflow (PoC)
dos windows

Filippo Bersani Linux/x86 - Egghunter (0x56767606) Using fstenv + Obfuscation Shellcode (31 bytes)
linux_x86 31

Joaquin Ramirez Martinez osTicket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting
webapps php

Peter Baris Remote Utilities Host 6.3 - Denial of Service
dos windows

Roziul Hasan Khan Shifat Windows/x64 - Download File (http://192.168.10.129/pl.exe) + Execute (C:/Users/Public/p.exe) Shellcode (358 bytes)
windows_x86-64 358

Todor Donev Linux Kernel 2.6.32-642/3.16.0-4 - 'inode' Integer Overflow
dos linux

Julien Ahrens AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting
webapps java

ERPScan SAP NetWeaver AS JAVA - 'BC-BMT-BPM-DSK' XML External Entity Injection
webapps xml