Ahmad Mahfouz DiskBoss Enterprise 8.2.14 - Remote Buffer Overflow
remote windows

Janusz Piechówka Jenkins < 1.650 - Java Deserialization
remote java CVE-2016-0792

Shahab Shamsi VehicleWorkshop - SQL Injection
webapps php

qflb.wu libjpeg-turbo 1.5.1 - Denial of Service
dos linux CVE-2017-9614

qflb.wu LAME 3.99.5 - Multiple Vulnerabilities
dos linux CVE-2017-9412;CVE-2017-9411;CVE-2017-9410

qflb.wu SoundTouch 1.9.2 - Multiple Vulnerabilities
dos linux CVE-2017-9260;CVE-2017-9259;CVE-2017-9258

patryk_bogdan Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
webapps hardware CVE-2017-3133;CVE-2017-3132;CVE-2017-3131

Shahab Shamsi Joomla! Component CCNewsLetter 2.1.9 - 'sbid' SQL Injection
webapps php

Marcel Böhme GNU libiberty - Buffer Overflow
dos linux CVE-2016-2226

Muhann4d AudioCoder 0.8.46 - Local Buffer Overflow (SEH)
local windows CVE-2017-8870

shinnai Friends in War Make or Break 1.7 - Cross-Site Request Forgery (Change Admin Password)
webapps php

Yorick Koster Microsoft Windows - '.LNK' Shortcut File Code Execution (Metasploit)
local windows CVE-2017-8464

Ihsan Sencan Friends in War Make or Break 1.7 - SQL Injection
webapps php

8bitsec WordPress Plugin Ads Pro < 3.4 - Cross-Site Scripting / SQL Injection
webapps php

Adam Friends in War Make or Break 1.7 - Authentication Bypass
webapps php

Google Security Research WebKit JSC - 'JSObject::putInlineSlow' / 'JSValue::putToPrimitive' Universal Cross-Site Scripting
webapps multiple CVE-2017-7037