Metasploit Dup Scout Enterprise - 'Login' Buffer Overflow (Metasploit)
remote windows

Metasploit Microsoft Office - Dynamic Data Exchange 'DDE' Payload Delivery (Metasploit)
remote windows

Akityo Piwigo 2.9.1 - 'cat_true' / 'cat_false' SQL Injection
webapps php CVE-2017-10682

Ihsan Sencan Bus Booking Script 1.0 - 'txtname' SQL Injection
webapps php CVE-2017-17645

Ihsan Sencan FS Lynda Clone 1.0 - SQL Injection
webapps php CVE-2017-17643

Ihsan Sencan Paid To Read Script 2.0.5 - 'uid' / 'fnum' / 'fn' SQL Injection
webapps php CVE-2017-17651

Ihsan Sencan Readymade Video Sharing Script 3.2 - HTML Injection
webapps php CVE-2017-17649

SecuriTeam vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion
webapps multiple CVE-2017-17672

SecuriTeam vBulletin 5.x - 'routestring' Remote Code Execution
webapps multiple

Jakub Palaczynski Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read
webapps cgi 443 CVE-2017-16787

Qualys Corporation GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow
local linux CVE-2017-1000409;CVE-2017-1000408

Ihsan Sencan Joomla! Component JEXTN Video Gallery 3.0.5 - 'id' SQL Injection
webapps php CVE-2017-17872

Ihsan Sencan Joomla! Component JEXTN Question And Answer 3.1.0 - SQL Injection
webapps php CVE-2017-17871

bashis Vivotek IP Cameras - Remote Stack Overflow (PoC)
remote multiple

Google Security Research Apple macOS/iOS - Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling
dos multiple CVE-2017-13867;HT208334

Google Security Research Apple macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig
dos macos CVE-2017-13875;HT208331