IOS Exploit Collection

2002: IOS TFTP server heap overflow exploit
2002: IOS OSPF neighbor array overflow exploit
2003: IOS HTTP server URL length integer overflow exploit
2008: IOS FTP server MKD command overflow exploit
2008: IOS VTP missing details DoS
piese auto ieftine

Related publications:
2008: Shellcode that attempts to find IOS functions to execute
2007: Password protected bind shell
2007: Connect Back Shell
2007: Two byte overwrite bind shell