Metasploit Linux Kernel 4.4 (Ubuntu 16.04) - 'BPF' Local Privilege Escalation (Metasploit)
local linux CVE-2016-4557

Metasploit Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow (Metasploit)
remote windows

Skylined Microsoft Internet Explorer 11 - MSHTML CMap­Element::Notify Use-After-Free (MS15-009)
dos windows CVE-2015-0040;MS15-009

0x4148 Boonex Dolphin 7.3.2 - Authentication Bypass / Remote Code Execution
webapps php

Saravana Kumar ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)
webapps php

0x4148 Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection
webapps php

Lenon Leite WordPress Plugin Product Catalog 8 1.2.0 - SQL Injection
webapps php

Lenon Leite WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection
webapps php

feedersec InvoicePlane 1.4.8 - Password Reset
webapps php

0x4148 4Images 1.7.13 - SQL Injection
webapps php

Curesec Research Team MyBB 1.8.6 - Cross-Site Scripting
webapps php 80

Skylined Microsoft Internet Explorer 11/10/9 - MSHTML 'PROPERTYDESC::Handle­Style­Component­Property' Out-of-Bounds Read (MS16-104)
dos windows CVE-2016-3324;MS16-104

Skylined Microsoft WININET.dll - 'CHttp­Header­Parser::Parse­Status­Line' Out-of-Bounds Read (MS16-104/MS16-105)
dos windows CVE-2016-3325;MS16-105;MS16-104

Kacper Szurek e107 CMS 2.1.2 - Privilege Escalation
webapps php

TinySec Microsoft Windows Kernel - 'win32k' Denial of Service (MS16-135)
dos windows CVE-2016-7255;MS16-135

laurent gaffie Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)
dos windows CVE-2016-7237;MS16-137