Thiago Sena Dreambox Plugin BouquetEditor - Cross-Site Scripting
webapps hardware CVE-2017-15287

Elber Tavares E-Sic Software livre CMS - Cross Site Scripting
webapps php

Elber Tavares E-Sic Software livre CMS - 'f' SQL Injection
webapps php

Elber Tavares E-Sic Software livre CMS - 'cpfcnpj' SQL Injection
webapps php

Elber Tavares E-Sic Software livre CMS - Autentication Bypass
webapps php

Guilherme Assmann E-Sic Software livre CMS - 'q' SQL Injection
webapps php

Ishaq Mohammed OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
webapps php CVE-2017-15284

Leonardo Duarte Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal
webapps linux

Mehmet Ince Trend Micro InterScan Messaging Security (Virtual Appliance) - 'Proxy.php' Remote Code Execution (Metasploit)
webapps php

Mehmet Ince Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit)
webapps php CVE-2017-11394

havysec Complain Management System - Hard-Coded Credentials / Blind SQL injection
webapps php

SecuriTeam QNAP HelpDesk < 1.1.12 - SQL Injection
webapps php CVE-2017-13068

SecuriTeam PHP Melody 2.7.3 - Multiple Vulnerabilities
webapps php CVE-2017-15579;CVE-2017-15578

8bitsec ClipShare 7.0 - SQL Injection
webapps php

intx0x80 Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (2)
webapps jsp CVE-2017-12617

Meisam Monsef ClipBucket 2.8.3 - Remote Code Execution
webapps php