Meisam Monsef Entrepreneur B2B Script - 'pid' SQL Injection
webapps php

Guillaume Kaddouch Solarwinds Kiwi Syslog 9.6.1.6 - Denial of Service
dos windows

Mutlu Benmutlu JoySale 2.2.1 - Arbitrary File Upload
webapps php

qflb.wu libmad 0.15.1b - 'mp3' Memory Corruption
dos linux CVE-2017-11552

Andy Tan SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection
webapps hardware CVE-2017-11494

Google Security Research Apple macOS/iOS - 'xpc_data' Objects Sandbox Escape Privilege Escalation
local multiple CVE-2017-7047

Touhid M.Shaikh VehicleWorkshop - Arbitrary File Upload
webapps php

Touhid M.Shaikh VehicleWorkshop - Authentication Bypass
webapps php

James Fitts Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload
webapps jsp CVE-2016-9351;CVE-2016-9349

James Fitts Advantech SUSIAccess < 3.0 - Directory Traversal / Information Disclosure (Metasploit)
webapps jsp CVE-2016-9349

qflb.wu libao 1.2.0 - Denial of Service
dos linux CVE-2017-11548

qflb.wu libvorbis 1.3.5 - Multiple Vulnerabilities
dos linux CVE-2017-11735;CVE-2017-11333

qflb.wu Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
dos linux CVE-2017-11359;CVE-2017-11358;CVE-2017-11332

qflb.wu Vorbis Tools oggenc 1.4.0 - '.wav' Denial of Service
dos linux CVE-2017-11331

qflb.wu DivFix++ 0.34 - Denial of Service
dos linux CVE-2017-11330

SecuriTeam McAfee Security Scan Plus - Remote Command Execution
remote windows CVE-2017-3897