CoreLabs Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control
remote multiple CVE-2017-14097;CVE-2017-14096;CVE-2017-14095;CVE-2017-14094;CVE-2017-11398

Metasploit Jenkins - XStream Groovy classpath Deserialization (Metasploit)
remote multiple 8080 CVE-2016-0792

Metasploit Tuleap 9.6 - Second-Order PHP Object Injection (Metasploit)
remote php 443 CVE-2017-7411

Metasploit Tuleap 9.6 - Second-Order PHP Object Injection (Metasploit)
remote php 443 CVE-2017-7411

Daniel Hodson GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Remote Code Execution
remote linux 80 CVE-2017-17562

Metasploit Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit)
remote php CVE-2017-17560

Google Security Research Outlook for Android - Attachment Download Directory Traversal
remote android

Philip Pettersson Palo Alto Networks Firewalls - Root Remote Code Execution
remote hardware CVE-2017-15944

Metasploit pfSense 2.4.1 - Cross-Site Request Forgery Error Page Clickjacking (Metasploit)
remote php

Metasploit Dup Scout Enterprise - 'Login' Buffer Overflow (Metasploit)
remote windows

Metasploit Microsoft Office - Dynamic Data Exchange 'DDE' Payload Delivery (Metasploit)
remote windows

bashis Vivotek IP Cameras - Remote Stack Overflow (PoC)
remote multiple

wetw0rk LabF nfsAxe FTP Client 3.7 - Remote Buffer Overflow (DEP Bypass)
remote windows 21

tintinweb Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner - Stack Buffer Overflow / Path Traversal
remote windows CVE-2017-16930;CVE-2017-16929

Metasploit Polycom Shell HDX Series - Traceroute Command Execution (Metasploit)
remote unix 23

Timo Sablowski LaCie 5big Network 2.2.8 - Command Injection
remote cgi