xort Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)
webapps json CVE-2017-6182

Goran Tuzovic Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
webapps json CVE-2016-6566

Kyle Neideck Deluge Web UI 1.3.13 - Cross-Site Request Forgery
webapps json CVE-2017-7178

Matt Bush Untangle NGFW 12.1.0 Beta - 'execEvil()' Command Injection
webapps json 80

Julien Ahrens Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery
webapps json 8443