Andrey B. Panfilov OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution
webapps multiple CVE-2017-7221

Paolo Stagno HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
webapps multiple CVE-2017-5799;CVE-2017-5798

Paolo Stagno HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
webapps multiple CVE-2017-5799;CVE-2017-5798

ERPScan Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
webapps jsp CVE-2017-3549

ERPScan Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE
webapps xml CVE-2017-3548

TAD GROUP WordPress Plugin Wow Forms 2.1 - SQL Injection
webapps php 80

TAD GROUP WordPress Plugin Wow Viral Signups 2.1 - SQL Injection
webapps php 80

TAD GROUP WordPress Plugin Car Rental System 2.5 - SQL Injection
webapps php 80

TAD GROUP WordPress Plugin KittyCatfish 2.2 - SQL Injection
webapps php 80

Cyril Vallicari FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery
webapps php

Francesco Oddo LogRhythm Network Monitor - Authentication Bypass / Command Injection
webapps linux

Persian Hack Team Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection
webapps php

Google Security Research Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripting
webapps multiple

Google Security Research Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross-Site Scripting
webapps multiple

hyp3rlinx Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset
webapps php CVE-2017-7615

hyp3rlinx Concrete5 CMS 8.1.0 - 'Host' Header Injection
webapps php CVE-2017-7725