Kaan KAMIS Property Listing Script - 'propid' Blind SQL Injection
webapps php

Harsh Jaiswal WordPress Core 4.7.0/4.7.1 - Content Injection (Ruby)
webapps linux

leonjza WordPress Core 4.7.0/4.7.1 - Content Injection
webapps linux

hyp3rlinx Ghostscript 9.20 - 'Filename' Command Execution
local windows

laurent gaffie Microsoft Windows 10 - SMBv3 Tree Connect (PoC)
dos windows VU867968

bashis QNAP NVR/NAS Devices - Buffer Overflow (PoC)
dos hardware

Google Security Research Google Android - RKP Information Disclosure via s2-remapping Physical Ranges
dos android SVE-2016-7897

Google Security Research Google Android - RKP EL1 Code Loading Bypass
local android SVE-2016-7897

Google Security Research Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled
dos multiple CVE-2017-2373

Google Security Research Apple WebKit - 'HTMLKeygenElement' Type Confusion
dos multiple CVE-2017-2369

Google Security Research Google Chrome - 'HTMLKeygenElement::shadowSelect()' Type Confusion
dos multiple

Google Security Research Apple WebKit - 'HTMLFormElement::reset()' Use-After Free
dos osx CVE-2017-2362

Google Security Research Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation
dos android SVE-2016-7897

Google Security Research Google Android - 'cfp_ropp_new_key_reenc' / 'cfp_ropp_new_key' RKP Memory Corruption
dos android SVE-2016-7897

Kaan KAMIS LogoStore - 'query' SQL Injection
webapps php

Pedro Ribeiro Billion / TrueOnline / ZyXEL Routers - Multiple Vulnerabilities
webapps hardware