Haifei Li Microsoft Outlook - HTML Email Denial of Service
dos windows

ScrR1pTK1dd13 VX Search Enterprise 9.5.12 - 'Verify Email' Buffer Overflow
dos windows

Jean-Marie Bourbon Intermec PM43 Industrial Printer - Local Privilege Escalation
local hardware CVE-2017-5671

FarazPajohan MikroTik RouterBoard 6.38.5 - Denial of Service
dos hardware CVE-2017-7285

hyp3rlinx DzSoft PHP Editor 4.2.7 - File Enumeration
remote windows

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Sysdream Nuxeo 6.0/7.1/7.2/7.3 - Remote Code Execution (Metasploit)
webapps jsp CVE-2017-5869

Sysdream EyesOfNetwork (EON) 5.0 - SQL Injection
webapps php CVE-2017-6088

Sysdream EyesOfNetwork (EON) 5.0 - Remote Code Execution
webapps php CVE-2017-6087

Pasquale Fiorillo QNAP QTS < 4.2.4 - Domain Privilege Escalation
local hardware CVE-2017-5227;NAS-201703-21

Metasploit Github Enterprise - Default Session Secret and Deserialization (Metasploit)
remote linux 8443

Metasploit Github Enterprise - Default Session Secret and Deserialization (Metasploit)
remote linux 8443

Google Security Research Apple Safari - Out-of-Bounds Read when Calling Bound Function
dos multiple CVE-2017-2447;HT207617

Google Security Research Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
dos multiple CVE-2017-2446;HT207617