Google Security Research Transmission - RPC DNS Rebinding
remote multiple 9091 CVE-2018-5702

tintinweb Parity Browser < 1.6.10 - Bypass Same Origin Policy
local multiple CVE-2017-18016

Vahagn Vardanyan SAP NetWeaver J2EE Engine 7.40 - SQL Injection
webapps multiple CVE-2016-2388;CVE-2016-2386;CVE-2016-1910

Kevin Kirsche Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution
remote multiple CVE-2017-10271

Multiple Multiple CPUs - 'Spectre' Information Disclosure
local multiple CVE-2017-5753;CVE-2017-5715

Pawel Gocyla EMC xPression 4.5SP1 Patch 13 - 'model.jobHistoryId' SQL Injection
webapps multiple CVE-2017-14960

Ahmad Mahfouz SAP BusinessObjects launch pad - Server-Side Request Forgery
webapps multiple

1337g Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution
remote multiple CVE-2017-10271

bashis Vitek - Remote Command Execution / Information Disclosure (PoC)
remote multiple

Aloyce J. Makalanga Ability Mail Server 3.3.2 - Cross-Site Scripting
webapps multiple CVE-2017-17752

Information Paradox Conarc iChannel - Improper Access Restrictions
webapps multiple CVE-2017-17759

CoreLabs Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control
remote multiple CVE-2017-14097;CVE-2017-14096;CVE-2017-14095;CVE-2017-14094;CVE-2017-11398

Metasploit Jenkins - XStream Groovy classpath Deserialization (Metasploit)
remote multiple 8080 CVE-2016-0792

bashis Multiple OEM - 'nsd' Remote Stack Format String (PoC)
dos multiple

SecuriTeam vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion
webapps multiple CVE-2017-17672

SecuriTeam vBulletin 5.x - 'routestring' Remote Code Execution
webapps multiple