Fernando Câmara Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting
webapps jsp CVE-2016-3670

Roziul Hasan Khan Shifat Linux/x64 - execve() + XOR Encoded Shellcode (84 bytes)
linux_x86-64 84

Meisam Monsef Open Source Real Estate Script 3.6.0 - SQL Injection
webapps php 80

Meisam Monsef PHP Realestate Script Script 4.9.0 - SQL Injection
webapps php 80

Roziul Hasan Khan Shifat Linux/x64 - Download File (http://192.168.30.129/pri.sh) + Execute Used To Steal Information Shellcode (399 bytes)
linux_x86-64 399

Francis Provencher Apple QuickTime - '.mov' Parsing Memory Corruption
dos osx CVE-2016-1848

JollyFrogs Linux/x86 - Bind (1234/TCP) Shell (/bin/sh) Shellcode (87 bytes) (Generator)
generator 87

Fugu Windows - Keylogger To File (%TEMP%/log.bin) + Null-Free Shellcode (601 bytes)
windows 601

Saif El-Sherei ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities
webapps jsp 443

Timo Lindfors Zabbix Agent 3.0.1 - 'mysql.size' Shell Command Injection
local linux CVE-2016-4338

Roziul Hasan Khan Shifat Linux/x64 - Reverse (192.168.209.131:1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (203 bytes)
linux_x86-64 203

Meisam Monsef Alibaba Clone B2B Script - Admin Authentication Bypass
webapps php 80

Roziul Hasan Khan Shifat Linux/x64 - Bind (1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (199 bytes)
linux_x86-64 199

Dolev Farhi Observium 0.16.7533 - (Authenticated) Arbitrary Command Execution
webapps php 80

Dolev Farhi Observium 0.16.7533 - Cross-Site Request Forgery
webapps php 80

fG! Mach Race OSX - Local Privilege Escalation
local osx CVE-2016-1757