Pedro Ribeiro Billion / TrueOnline / ZyXEL Routers - Multiple Vulnerabilities
webapps hardware

Simon Gurney Netman 204 - Backdoor Account / Password Reset
webapps hardware

Kacper Szurek Viscosity 1.6.7 - Local Privilege Escalation
local windows

Trustwave's SpiderLabs Netgear Routers - Password Disclosure
webapps hardware CVE-2017-5521

Mariusz Poplawski HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download
webapps php

hyp3rlinx PHP PEAR 1.10.1 - Arbitrary File Download
webapps php CVE-2017-5630

LiquidWorm TrueConf Server 4.3.7 - Multiple Vulnerabilities
webapps php

Persian Hack Team Joomla! Component JTAG Calendar 6.2.4 - 'search' SQL Injection
webapps php

Wolfgang Hotwagner Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Local Privilege Escalation
local linux CVE-2017-3316

Filippos Mastrogiannis Radisys MRF - Command Injection
webapps cgi CVE-2016-10043

Guido Vranken OpenSSL 1.1.0 - Remote Client Denial of Service
dos multiple CVE-2017-3730

Parvez Anwar Palo Alto Networks Terminal Services Agent 7.0.3-13 - Integer Overflow
local windows CVE-2017-5329

Mike Brown Polycom VVX Web Interface - Change Admin Password
webapps hardware

Robert L. Taylor Linux/x64 - execve(/bin/sh) Shellcode (22 bytes)
linux_x86-64 22

Federico Bento OpenSSH 6.8 < 6.9 - 'PTY' Local Privilege Escalation
local linux CVE-2015-6565

Manish Tanwar PHPBack < 1.3.1 - SQL Injection / Cross-Site Scripting
webapps php