loneferret Pi-Hole Web Interface 2.8.1 - Persistent Cross-Site Scripting in Whitelist/Blacklist
webapps linux

hyp3rlinx Lepton CMS 2.2.0/2.2.1 - PHP Code Injection
webapps php 80

hyp3rlinx Lepton CMS 2.2.0/2.2.1 - Directory Traversal
webapps php 80

Roziul Hasan Khan Shifat Windows/x86 - CreateProcessA cmd.exe Shellcode (253 bytes)
windows_x86 253

Roziul Hasan Khan Shifat Windows/x86 - MessageBoxA() Shellcode (242 bytes)
windows_x86 242

hyp3rlinx WSO2 Carbon 4.4.5 - Denial of Service / Cross-Site Request Forgery
webapps jsp 9443 CVE-2016-4315

hyp3rlinx WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting
webapps jsp 9443 CVE-2016-4316

hyp3rlinx WSO2 Carbon 4.4.5 - Local File Inclusion
webapps jsp 9443 CVE-2016-4314

hyp3rlinx WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities
webapps jsp CVE-2016-4312;CVE-2016-4311

COSIG Microsoft Word 2013/2016 - sprmSdyaTop Denial of Service (MS16-099)
dos multiple CVE-2016-3316;MS16-099

1n3 Zabbix 2.2.x/3.0.x - SQL Injection
webapps php

Kaimi GitLab - 'impersonate' Feature Privilege Escalation
webapps ruby 80 CVE-2016-4340

GulfTech Security Claroline < 1.7.7 - Arbitrary File Inclusion
webapps php GTSA-00104;CVE-2006-4844

PentestPartners Samsung Smart Home Camera SNH-P-6410 - Command Injection
remote hardware

pgt FreePBX 13/14 - Remote Command Execution / Privilege Escalation
remote linux

GulfTech Security SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite
webapps php GTSA-00100;CVE-2006-4019