plug.dj's lovely list of exploits, found after their 1.x update