Hodorsec Ricoh myPrint 2.9.2.4 - Hard-Coded Credentials
webapps hardware

b1p0l4r WordPress Theme CherryFramework 3.1.4 - Backup File Download
webapps php 80

Javier Olmedo Ticketly 1.0 - 'name' SQL Injection
webapps php 80

LiquidWorm Synaccess netBooter NP-0801DU 7.4 - Cross-Site Request Forgery (Add Admin)
webapps hardware

Google Security Research Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
local windows CVE-2018-8550

Javier Olmedo Ticketly 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80

Google Security Research Microsoft Edge Chakra - OP_Memset Type Confusion
dos windows

Google Security Research Microsoft Edge Chakra - OP_Memset Type Confusion
dos windows

Kağan Çapar HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
local windows_x86

Kağan Çapar HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
local windows_x86

s7acktrac3 XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
dos windows

s7acktrac3 XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
dos windows

Google Security Research Linux - Broken uid/gid Mapping for Nested User Namespaces
local linux CVE-2018-18955

Dawood Ansar DomainMOD 4.11.01 - 'raid' Cross-Site Scripting
webapps php 80 CVE-2018-19136

Ameer Pornillos PHP-Proxy 5.1.0 - Local File Inclusion
webapps php 80 CVE-2018-19246

Nawaf Alkeraithe Electricks eCommerce 1.0 - Persistent Cross-Site Scripting
webapps php 80