Javier Tello Linux/x86 - Bind (99999/TCP) NetCat Traditional (/bin/nc) Shell (/bin/bash) Shellcode (58 bytes)
linux_x86 58

Ihsan Sencan Nominas 0.27 - 'username' SQL Injection
webapps php 80

Ihsan Sencan Mongoose Web Server 6.9 - Denial of Service (PoC)
dos windows_x86-64

hyp3rlinx D-LINK Central WifiManager CWM-100 - Server-Side Request Forgery
webapps hardware

Ihsan Sencan ServerZilla 1.0 - 'email' SQL Injection
webapps php 80

Ihsan Sencan GPS Tracking System 2.12 - 'username' SQL Injection
webapps php 80

Ihsan Sencan Easyndexer 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Ismael Nava CuteFTP 9.3.0.3 - Denial of Service (PoC)
dos windows_x86-64

Ihsan Sencan Facturation System 1.0 - 'modid' SQL Injection
webapps php 80

Ihsan Sencan The Don 1.0.1 - 'login' SQL Injection
webapps php 80

Wadeek TP-Link Archer C50 Wireless Router 171227 - Cross-Site Request Forgery (Configuration File Disclosure)
webapps hardware

Ihsan Sencan Paroiciel 11.20 - 'tRecIdListe' SQL Injection
webapps php 80

Pasquale Turi WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting
webapps php 80 CVE-2018-19040;CVE-2018-19041;CVE-2018-19042;CVE-2018-19043

Pasquale Turi WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting
webapps php 80 CVE-2018-19040;CVE-2018-19041;CVE-2018-19042;CVE-2018-19043

Konstantinos Alexiou TufinOS 2.17 Build 1193 - XML External Entity Injection
webapps linux

Ihsan Sencan Data Center Audit 2.6.2 - 'username' SQL Injection
webapps php 80