xort Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection
webapps cgi CVE-2016-9682

Sarath Nair Oracle E-Business Suite 12.x - Server-Side Request Forgery
webapps jsp CVE-2017-10246

Daniel Correa PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting
webapps multiple CVE-2017-11356;CVE-2017-11355

xort Barracuda Load Balancer Firmware < 6.0.1.006 - Remote Command Injection (Metasploit)
webapps hardware CVE-2017-6320

xort Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)
webapps json CVE-2017-6182

SecuriTeam Geneko Routers - Path Traversal
webapps hardware CVE-2017-11456

tomplixsee Orangescrum 1.6.1 - Multiple Vulnerabilities
webapps php

Sw1tCh WDTV Live SMP 2.03.20 - Remote Password Reset
webapps hardware

LiquidWorm Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download
webapps hardware

LiquidWorm Dasan Networks GPON ONT WiFi Router H64X Series - Privilege Escalation
webapps hardware

LiquidWorm Dasan Networks GPON ONT WiFi Router H64X Series - Cross-Site Request Forgery
webapps hardware

LiquidWorm Dasan Networks GPON ONT WiFi Router H64X Series - Authentication Bypass
webapps hardware

Hesam Bazvand WordPress Plugin Sabai Discuss - Cross-Site Scripting
webapps php

Paul Taylor NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
webapps linux CVE-2017-7175;CVE-2017-6972

Nassim Asrir DataTaker DT80 dEX 1.50.012 - Information Disclosure
webapps hardware CVE-2017-11165

LiquidWorm Pelco VideoXpert 1.12.105 - Information Disclosure
webapps windows