X41 D-Sec GmbH Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
webapps cgi 443 CVE-2017-8841;CVE-2017-8840;CVE-2017-8839;CVE-2017-8838;CVE-2017-8837;CVE-2017-8836;CVE-2017-8835

X41 D-Sec GmbH Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
webapps cgi 443 CVE-2017-8841;CVE-2017-8840;CVE-2017-8839;CVE-2017-8838;CVE-2017-8837;CVE-2017-8836;CVE-2017-8835

defensecode WordPress Plugin Tribulant Newsletters 4.6.4.2 - File Disclosure / Cross-Site Scripting
webapps php 80

saelo Apple Safari 10.1 - Spread Operator Integer Overflow Remote Code Execution
remote macos CVE-2017-2536

Goran Tuzovic Kronos Telestaff < 2.92EU29 - SQL Injection
webapps asp

OSS-Fuzz Wireshark 2.2.0 < 2.2.12 - ROS Dissector Denial of Service
dos multiple CVE-2017-9347

OSS-Fuzz Wireshark 2.2.6 - IPv6 Dissector Denial of Service
dos multiple CVE-2017-9353

hyp3rlinx BIND 9.10.5 - Unquoted Service Path Privilege Escalation
local windows CVE-2017-3141

hyp3rlinx Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting
webapps windows CVE-2017-9414

hyp3rlinx Subsonic 6.1.1 - XML External Entity Injection
local windows CVE-2017-9355

hyp3rlinx Subsonic 6.1.1 - Server-Side Request Forgery
webapps windows CVE-2017-9413

hyp3rlinx Subsonic 6.1.1 - Cross-Site Request Forgery
webapps windows CVE-2017-9415

Mohammad Reza Espargham Parallels Desktop - Virtual Machine Escape
local windows

FarazPajohan DNSTracer 1.8.1 - Buffer Overflow (PoC)
dos linux CVE-2017-9430

Dimitrios Tsagkarakis WordPress Plugin Event List < 0.7.8 - SQL Injection
webapps php CVE-2017-9429

LiquidWorm EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
webapps hardware