Zeeshan Shaikh EPESI 1.8.2 rev20170830 - Cross-Site Scripting
webapps php CVE-2017-14717;CVE-2017-14712

Tauco Fiberhome AN5506-04-F - Command Injection
webapps hardware

Marcin Woloszyn OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'documentId' SQL Injection
webapps jsp CVE-2017-14758

Marcin Woloszyn OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'jobRunId' SQL Injection
webapps jsp CVE-2017-14757

Sysdream phpCollab 2.5.1 - SQL Injection
webapps php CVE-2017-6089

Sysdream phpCollab 2.5.1 - Arbitrary File Upload
webapps php CVE-2017-6090

Saeed reza Zamanian NPM-V (Network Power Manager) 2.4.1 - Password Reset
webapps hardware

Ihsan Sencan ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download
webapps php CVE-2017-15956

Ihsan Sencan WordPress Plugin WPHRM - SQL Injection
webapps php CVE-2017-14848

SPARC FileRun < 2017.09.18 - SQL Injection
webapps php CVE-2017-14738

8bitsec Real Estate MLM plan script 1.0 - 'srch' SQL Injection
webapps php

8bitsec PHP Multi Vendor Script 1.02 - 'sid' SQL Injection
webapps php

8bitsec Easy Blog PHP Script 1.3a - 'id' SQL Injection
webapps php

Elber Tavares Roteador Wireless Intelbras WRN150 - Autentication Bypass
webapps hardware

hyp3rlinx Trend Micro OfficeScan 11.0/XG (12.0) - 'Host' Header Injection
webapps php CVE-2017-14087

hyp3rlinx Trend Micro OfficeScan 11.0/XG (12.0) - Server Side Request Forgery
webapps php