f3ci NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion
webapps jsp

Ike-Clinton Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution
webapps hardware

Touhid M.Shaikh PlaySMS 1.4 - 'import.php' Remote Code Execution
webapps php CVE-2017-9101

hyp3rlinx Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery
webapps php CVE-2017-7620

justpentest KMCIS CaseAware - Cross-Site Scripting
webapps php CVE-2017-5631

Simon Brannstrom Tecnovision DLX Spot - Arbitrary File Upload
webapps php CVE-2017-12929

Simon Brannstrom Tecnovision DLX Spot - Authentication Bypass
webapps php CVE-2017-12930

Touhid M.Shaikh D-Link DIR-600M Wireless N 150 - Authentication Bypass
webapps hardware

Touhid M.Shaikh PlaySMS 1.4 - Remote Code Execution
webapps php 80

ByteM3 ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass
webapps java

Ravindra Singh Rathore SAP Business One for Android 1.2.3 - XML External Entity Injection
webapps xml CVE-2016-6256

David Tomaschik Belden Garrettcom 6K/10K Switches - Authentication Bypass / Memory Corruption
webapps php

ERPScan Oracle PeopleSoft - Server-Side Request Forgery
webapps java CVE-2017-3546

Mateus Lino Joomla! 3.7.0 - 'com_fields' SQL Injection
webapps php 80 CVE-2017-8917

Charles Fol Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entity
webapps java CVE-2017-3548

Yoroi INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields
webapps xml CVE-2017-7953