Ishaq Mohammed Monstra CMS 3.0.4 - (Authenticated) Arbitrary File Upload / Remote Code Execution
webapps php

Zahid Abbasi Ciuis CRM 1.0.7 - SQL Injection
webapps php

Ihsan Sencan Movie Guide 2.0 - SQL Injection
webapps php 80

anonymous Linux kernel < 4.10.15 - Race Condition Privilege Escalation
local linux CVE-2017-10661

Manuel García Cárdenas Sync Breeze 10.2.12 - Denial of Service
dos windows CVE-2017-17088

Nassim Asrir ITGuard-Manager 0.0.0.1 - Remote Code Execution
webapps cgi

bashis Multiple OEM - 'nsd' Remote Stack Format String (PoC)
dos multiple

nixawk Linksys WVBR0 - 'User-Agent' Remote Command Injection
webapps hardware CVE-2017-17411

Philip Pettersson Palo Alto Networks Firewalls - Root Remote Code Execution
remote hardware CVE-2017-15944

Metasploit pfSense 2.4.1 - Cross-Site Request Forgery Error Page Clickjacking (Metasploit)
remote php

Metasploit Advantech WebAccess 8.2-2017.03.31 - Webvrpcs Service Opcode 80061 Stack Buffer Overflow (Metasploit)
webapps windows 4592 CVE-2017-14016

Metasploit Dup Scout Enterprise - 'Login' Buffer Overflow (Metasploit)
remote windows

Metasploit Microsoft Office - Dynamic Data Exchange 'DDE' Payload Delivery (Metasploit)
remote windows

Akityo Piwigo 2.9.1 - 'cat_true' / 'cat_false' SQL Injection
webapps php CVE-2017-10682

Ihsan Sencan Bus Booking Script 1.0 - 'txtname' SQL Injection
webapps php CVE-2017-17645

Ihsan Sencan FS Lynda Clone 1.0 - SQL Injection
webapps php CVE-2017-17643