hyp3rlinx Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting
webapps windows CVE-2017-9414

hyp3rlinx Subsonic 6.1.1 - XML External Entity Injection
local windows CVE-2017-9355

hyp3rlinx Subsonic 6.1.1 - Server-Side Request Forgery
webapps windows CVE-2017-9413

hyp3rlinx Subsonic 6.1.1 - Cross-Site Request Forgery
webapps windows CVE-2017-9415

Mohammad Reza Espargham Parallels Desktop - Virtual Machine Escape
local windows

FarazPajohan DNSTracer 1.8.1 - Buffer Overflow (PoC)
dos linux CVE-2017-9430

Dimitrios Tsagkarakis WordPress Plugin Event List < 0.7.8 - SQL Injection
webapps php CVE-2017-9429

LiquidWorm EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
webapps hardware

Dimitrios Tsagkarakis WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection
webapps php CVE-2017-9418

Persian Hack Team Joomla! Component Payage 2.05 - 'aid' SQL Injection
webapps php

SecuriTeam HPE Intelligent Management Center (iMC) 7.2 (E0403P10) - Code Execution
remote linux CVE-2017-5815

n3ckD_ Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow (PoC)
dos windows

Goran Tuzovic Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
webapps json CVE-2016-6566

Nassim Asrir reiserfstune 3.6.25 - Local Buffer Overflow
dos linux

Kaimi CMS Web-Gooroo < 1.141 - Multiple Vulnerabilities
webapps php

Google Security Research WebKit - 'Element::setAttributeNodeNS' Use-After-Free
dos multiple