Mitsuaki Shiraishi QNAP Photo Station 5.7.0 - Cross-Site Scripting
webapps hardware CVE-2018-0715

Carlos Avila Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
webapps php

Carlos Avila MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
webapps php 80

PUNIT DARJI D-Link Dir-600M N150 - Cross-Site Scripting
webapps hardware 80

Hamit CİBO WirelessHART Fieldgate SWG70 3.0 - Directory Traversal
webapps hardware CVE-2018-16059

Marko Jokic Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)
webapps linux CVE-2014-0030

Javier Olmedo Jorani Leave Management 0.6.5 - (Authenticated) 'startdate' SQL Injection
webapps php 80 CVE-2018-15918

Javier Olmedo Jorani Leave Management 0.6.5 - Cross-Site Scripting
webapps php 80 CVE-2018-15917

LiquidWorm NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)
webapps xml

Sandip Dey Tenda ADSL Router D152 - Cross-Site Scripting
webapps hardware 80 CVE-2018-14497

Reigning Shells RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution
webapps linux

Andrea Bocchetti mooSocial Store Plugin 2.6 - SQL Injection
webapps php

Renos Nikolaou Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection
webapps php

AkkuS PHP File Browser Script 1 - Directory Traversal
webapps php 443

AkkuS Logicspice FAQ Script 2.9.7 - Remote Code Execution
webapps php 80

AkkuS Online Quiz Maker 1.0 - 'catid' SQL Injection
webapps php 80