Pabstersac MyBB 1.8.13 - Cross-Site Scripting
webapps php CVE-2017-16781

Pabstersac MyBB 1.8.13 - Remote Code Execution
webapps php CVE-2017-16780

hyp3rlinx Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass
local windows CVE-2017-6331

0x4ndr3 Linux/x64 - Bind (4444/TCP) Shell (/bin/sh) + Password (1234567) Shellcode (136 bytes)
linux_x86-64 136

Wei Lei and Liu Yang PHP 7.1.8 - Heap Buffer Overflow
dos multiple CVE-2017-16642

Metasploit Mako Server 2.5 - OS Command Injection Remote Command Execution (Metasploit)
remote windows

Google Security Research Microsoft Internet Explorer 11 - 'jscript!JsErrorToString' Use-After-Free
dos windows CVE-2017-11810

SecuriTeam Ametys CMS 4.0.2 - Password Reset
webapps php CVE-2017-16935

bzyo Xlight FTP Server 3.8.8.5 - Buffer Overflow (PoC)
dos windows

Cody Sixteen ManageEngine Applications Manager 13 - SQL Injection
webapps windows 9090 CVE-2017-16543;CVE-2017-16542

s4squatch pfSense 2.3.1_1 - Command Execution
webapps php

Chris Salls Linux Kernel 4.13 (Ubuntu 17.10) - 'waitid()' SMEP/SMAP/Chrome Sandbox Privilege Escalation
local linux CVE-2017-5123

bzyo SMPlayer 17.11.0 - '.m3u' Buffer Overflow (PoC)
dos windows

hyp3rlinx Avaya IP Office (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH)
remote windows CVE-2017-11309

hyp3rlinx Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow
dos windows CVE-2017-12969

Joseph McDonagh Actiontec C1000A Modem - Backdoor Account
remote hardware