Robin Peraglie Roundcube 1.2.2 - Remote Code Execution
webapps php 80

Roziul Hasan Khan Shifat Windows/x64 - Bind (4444/TCP) Shell Shellcode (508 bytes)
windows_x86-64 508

Filippo Bersani Linux/x86 - Reverse (/TCP) Netcat + mkfifo (-e option disabled) Shell (localhost:9999) Shellcode (180 bytes)
linux_x86 180

Mediaservice.net Srl. Red Hat JBoss EAP - Deserialization of Untrusted Data
webapps java 8080 CVE-2016-7065

Filippo Bersani Linux/x86 - Egghunter (0x56767606) Using fstenv + Obfuscation Shellcode (31 bytes)
linux_x86 31

Dawid Golunski GNU Wget < 1.18 - Access List Bypass / Race Condition
remote multiple 80 CVE-2016-7098

Roziul Hasan Khan Shifat Windows/x64 - Download File (http://192.168.10.129/pl.exe) + Execute (C:/Users/Public/p.exe) Shellcode (358 bytes)
windows_x86-64 358

Core Security TP-LINK TDDP - Multiple Vulnerabilities
dos hardware 1040

Ashiyane Digital Security Team Linux/x64 - execve(/bin/sh -c reboot) Shellcode (89 bytes)
linux_x86-64 89

Metasploit D-Link DIR-Series Routers - HNAP Login Stack Buffer Overflow (Metasploit)
remote multiple 80 CVE-2016-6563

Curesec Research Team FUDforum 3.0.6 - Local File Inclusion
webapps php 80

Curesec Research Team FUDforum 3.0.6 - Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80

Curesec Research Team LEPTON 2.2.2 - Remote Code Execution
webapps php 80

Curesec Research Team LEPTON 2.2.2 - SQL Injection
webapps php 80

Curesec Research Team Mezzanine 4.2.0 - Cross-Site Scripting
webapps python 80

Sipke Mellema WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery
webapps php 80