Apple iOS version 7.1.2 suffered from a merge apps service local bypass vulnerability.
>> ARCHIVE: 2014-09
Linux/x86-64 – Bind TCP Password (hell) /bin/sh Shell (4444/TCP) Shellcode (147 bytes)
vBulletin 4.0.x – 4.1.2 (search.php, cat param) – SQL Injection Exploit