hyp3rlinx Subsonic 6.1.1 - Server-Side Request Forgery
webapps windows CVE-2017-9413

hyp3rlinx Subsonic 6.1.1 - Cross-Site Request Forgery
webapps windows CVE-2017-9415

Mohammad Reza Espargham Parallels Desktop - Virtual Machine Escape
local windows

FarazPajohan DNSTracer 1.8.1 - Buffer Overflow (PoC)
dos linux CVE-2017-9430

Dimitrios Tsagkarakis WordPress Plugin Event List < 0.7.8 - SQL Injection
webapps php CVE-2017-9429

LiquidWorm EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
webapps hardware

Dimitrios Tsagkarakis WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection
webapps php CVE-2017-9418

Persian Hack Team Joomla! Component Payage 2.05 - 'aid' SQL Injection
webapps php

SecuriTeam HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution
remote linux CVE-2017-5815

Goran Tuzovic Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
webapps json CVE-2016-6566

Nassim Asrir reiserfstune 3.6.25 - Local Buffer Overflow
dos linux

Google Security Research WebKit - 'Element::setAttributeNodeNS' Use-After-Free
dos multiple

Google Security Research WebKit - 'Document::prepareForDestruction' / 'CachedFrame' Universal Cross-Site Scripting
webapps multiple

Google Security Research WebKit - 'CachedFrameBase::restore' Universal Cross-Site Scripting
webapps multiple

Google Security Research WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting
webapps multiple CVE-2017-2528

Google Security Research WebKit JSC - Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope
dos multiple CVE-2017-2531