Adam Friends in War Make or Break 1.7 - Authentication Bypass
webapps php

Google Security Research WebKit JSC - 'JSObject::putInlineSlow' / 'JSValue::putToPrimitive' Universal Cross-Site Scripting
webapps multiple CVE-2017-7037

Metasploit vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)
webapps php CVE-2015-7808

RedTeam Pentesting REDDOXX Appliance Build 2032 / 2.0.625 - Arbitrary File Disclosure
webapps json

RedTeam Pentesting REDDOXX Appliance Build 2032 / 2.0.625 - Remote Command Execution
webapps json

BTIS Team PaulShop - SQL Injection / Cross-Site Scripting
webapps php

Kacper Szurek ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)
webapps java CVE-2017-11346

b0x41s NEC UNIVERGE UM4730 < 11.8 - SQL Injection
webapps php

Viktoras VACRON VIG-US731VE 1.0.18-09-B727 IP Camera - Authentication Bypass
webapps hardware

8bitsec WordPress Plugin IBPS Online Exam 1.0 - SQL Injection / Cross-Site Scripting
webapps php

Raffaele Forte Tilde CMS 1.01 - Multiple Vulnerabilities
webapps php

Teng Joomla! Component JoomRecipe 1.0.4 - 'search_author' SQL Injection
webapps php

xort Citrix CloudBridge - 'CAKEPHP' Cookie Command Injection
webapps cgi CVE-2017-6316

xort Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)
webapps cgi CVE-2017-6316

xort Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)
webapps cgi

xort Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)
webapps cgi