ParagonSec PaloAlto Networks Expedition Migration Tool 1.0.106 - Information Disclosure
webapps linux 80

Google Security Research VBScript - 'rtFilter' Out-of-Bounds Read
dos windows CVE-2018-8552

Google Security Research VBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free
dos windows CVE-2018-8544

Marco Ivaldi xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation
local multiple CVE-2018-14665

LiquidWorm Synaccess netBooter NP-02x/NP-08x 6.8 - Authentication Bypass
webapps cgi 80

Jinbum Park Linux Kernel 4.8 (Ubuntu 16.04) - Leak sctp Kernel Pointer
dos linux

Google Security Research WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the 'ForInContext' Object
dos multiple CVE-2018-4386

Google Security Research WebKit JIT - 'ByteCodeParser::handleIntrinsicCall' Type Confusion
dos multiple CVE-2018-4382

Google Security Research WebKit JSC JIT - 'JSPropertyNameEnumerator' Type Confusion
dos multiple CVE-2018-4416

zephyr Arm Whois 3.11 - Buffer Overflow (ASLR)
local windows_x86

zephyr Arm Whois 3.11 - Buffer Overflow (ASLR)
local windows_x86

Florian Bogner ELBA5 5.8.0 - Remote Code Execution
remote windows 2640

numan türle Zyxel VMG1312-B10D 5.13AAXA.8 - Directory Traversal
webapps hardware 80

Loading Kura Kura No-Cms 1.0 - 'order_by' SQL Injection
webapps php 80

Javier Olmedo Ticketly 1.0 - 'kind_id' SQL Injection
webapps php 80 CVE-2018-18923

strider MariaDB Client 10.1.26 - Denial of Service (PoC)
dos linux