Metasploit Supervisor 3.0a1 < 3.3.2 - XML-RPC (Authenticated) Remote Code Execution (Metasploit)
remote linux 9001 CVE-2017-11610

sickness Disk Pulse Enterprise 10.0.12 - GET Buffer Overflow (SEH)
remote windows 80

RAT - ThiefKing HBGK DVR 3.0.0 build20161206 - Authentication Bypass
webapps hardware

f3ci CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)
local windows CVE-2017-14627

Kc57 JitBit HelpDesk < 9.0.2 - Authentication Bypass
webapps asp

8bitsec PHP Auction Ecommerce Script 1.6 - SQL Injection
webapps php

8bitsec Secure E-commerce Script 1.02 - 'sid' SQL Injection
webapps php

Ihsan Sencan Claydip Airbnb Clone 1.0 - Arbitrary File Upload
webapps php CVE-2017-14704

Ihsan Sencan Cash Back Comparison Script 1.0 - SQL Injection
webapps php CVE-2017-14703

Ihsan Sencan Multi Level Marketing - SQL Injection
webapps php

Ihsan Sencan Lending And Borrowing - 'pid' SQL Injection
webapps php

Ihsan Sencan Stock Photo Selling 1.0 - SQL Injection
webapps php

West Shepherd ERS Data System 1.8.1 - Java Deserialization
remote windows CVE-2017-14702

Metasploit Disk Pulse Enterprise 9.9.16 - GET Buffer Overflow (Metasploit)
remote windows 80

Google Security Research Microsoft Edge Chakra - 'JavascriptFunction::ReparseAsmJsModule' Incorrectly Re-parses
dos windows CVE-2017-8755

Google Security Research Microsoft Edge Chakra - 'Parser::ParseCatch' Does Not Handle 'eval()' (Denial of Service)
dos windows CVE-2017-11764