- [Write-up] RC3 CTF : My Lil Droid
- [Write-Up] RC3 CTF : Bridge of Cyber
- Putty 0.67 Cleartext Password Storage
- ScriptCase CSRF / XSS / SQL Injection
- Joomla K2 2.7.1 Shell Upload / Cross Site Request Forgery
- Magento Bruteforcer
- Red Jasmin 1.0 SQL Injection
- Under the (Linux) Hood
- SAP NetWeaver AS ABAP 7.4 Directory Traversal
- Relevanssi Premium 1.14.4 SQL Injection
- Relevanssi Premium 1.14.4 Code Execution
- Huawei Flybox B660 3G/4G Router Authentication Bypass
- Post Indexer 3.0.6.1 SQL Injection
- Teradata Studio Express 15.12.00.00 Race Condition
- Apple iOS 10.1 Access Permissions
- FUDforum 3.0.6 Local File Inclusion
- Jaws 1.1.1 Open Redirect / Object Injection / Cookie Flags
- Jaws 1.1.1 Code Execution
- Lepton 2.2.2 Stable Shell Upload
- Lepton 2.2.2 Stable CSRF / Open Redirect / Password Handling
