Ihsan Sencan My Link Trader 1.1 - Authentication Bypass
webapps php

justpentest Splunk 6.1.1 - 'Referer' Header Cross-Site Scripting
webapps php CVE-2014-8380

Jodson Santos Atlassian Confluence < 5.10.6 - Persistent Cross-Site Scripting
webapps jsp CVE-2016-6283

Adam My Click Counter 1.0 - Authentication Bypass
webapps php

Dawid Golunski PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScriptum' Remote Code Execution
webapps php CVE-2016-10074;CVE-2016-10045;CVE-2016-10034;CVE-2016-10033

Dawid Golunski Zend Framework / zend-mail < 2.4.11 - Remote Code Execution
webapps php CVE-2016-10034

Li Fei b2evolution 6.8.2 - Arbitrary File Upload
webapps php

LiquidWorm Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery
webapps hardware

LiquidWorm Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection
webapps hardware

r3m1ck WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload
webapps php

anarc0der PHPMailer < 5.2.18 - Remote Code Execution
webapps php CVE-2016-10033

qemm Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection
webapps php

Dawid Golunski SwiftMailer < 5.4.5-DEV - Remote Code Execution
webapps php CVE-2016-10074

TAD GROUP WordPress Plugin Simply Poll 1.4.1 - SQL Injection
webapps php

Dawid Golunski PHPMailer < 5.2.20 - Remote Code Execution
webapps php CVE-2016-10045;CVE-2016-10033

Metasploit PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)
webapps multiple CVE-2016-1004;CVE-2016-1003