WordPress WP Symposium Plugin 15.1 – Blind SQL Injection

Werkzeug Debug Shell Command Execution

Magento CE < 1.9.0.1 Post Auth RCE

Nuts CMS Remote PHP Code Injection / Execution

FTP Commander 8.02 – SEH Overwrite

XMPlay 3.8.1.12 – .pls Local Crash PoC

Microsoft Windows HTA (HTML Application) – Remote Code Execution (MS14-064)

Sagemcom F@ST 3864 V2 – Get Admin Password

MASM321 11 Quick Editor (.qeditor) 4.0g- .qse SEH Based Buffer Overflow (ASLR & SAFESEH bypass)

Windows x86 All Versions – user32!MessageBox “Hello World!” (199 Bytes Null-Free)