Marouene Boubakri Rubedo CMS 3.4.0 - Directory Traversal
webapps linux CVE-2018-16836

SadFud CirCarLife SCADA 4.3.0 - Credential Disclosure
webapps hardware CVE-2018-12634

Gokhan Sagoglu Bayanno Hospital Management System 4.0 - Cross-Site Scripting
webapps php

Nassim Asrir LW-N605R 12.20.2.1486 - Remote Code Execution
webapps hardware

Mitsuaki Shiraishi QNAP Photo Station 5.7.0 - Cross-Site Scripting
webapps hardware CVE-2018-0715

Carlos Avila Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
webapps php

Carlos Avila MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
webapps php 80

PUNIT DARJI D-Link Dir-600M N150 - Cross-Site Scripting
webapps hardware 80

Hamit CİBO WirelessHART Fieldgate SWG70 3.0 - Directory Traversal
webapps hardware CVE-2018-16059

Marko Jokic Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)
webapps linux CVE-2014-0030

Javier Olmedo Jorani Leave Management 0.6.5 - (Authenticated) 'startdate' SQL Injection
webapps php 80 CVE-2018-15918

Javier Olmedo Jorani Leave Management 0.6.5 - Cross-Site Scripting
webapps php 80 CVE-2018-15917

LiquidWorm NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)
webapps xml

Sandip Dey Tenda ADSL Router D152 - Cross-Site Scripting
webapps hardware 80 CVE-2018-14497

Reigning Shells RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution
webapps linux

Andrea Bocchetti mooSocial Store Plugin 2.6 - SQL Injection
webapps php