Sarath Nair Oracle Siebel CRM 8.1.1 - CSV Injection
webapps java

Alireza Norkazemi PHP-SHOP master 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80

LiquidWorm TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure
webapps hardware CVE-2018-18428

LiquidWorm FLIR AX8 Thermal Camera 1.32.16 - Hard-Coded Credentials
remote hardware

joernchen Git Submodule - Arbitrary Code Execution
local linux CVE-2018-17456

Google Security Research Microsoft Windows - 'FSCTL_FIND_FILES_BY_SID' Information Disclosure
dos windows CVE-2018-8411

d0wnp0ur Heatmiser Wifi Thermostat 1.7 - Credential Disclosure
webapps hardware

hyp3rlinx NoMachine < 5.3.27 - Remote Code Execution
remote windows CVE-2018-17980

LiquidWorm FLIR Brickstream 3D+ - RTSP Stream Disclosure
webapps hardware

LiquidWorm FLIR AX8 Thermal Camera 1.32.16 - RTSP Stream Disclosure
webapps hardware

Renos Nikolaou Advanced HRM 1.6 - Remote Code Execution
webapps php

LiquidWorm FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution
webapps hardware

LiquidWorm FLIR Brickstream 3D+ 2.1.742.1842 - Config File Disclosure
webapps hardware

LiquidWorm FLIR AX8 Thermal Camera 1.32.16 - Arbitrary File Disclosure
webapps hardware

Purplemet Security SugarCRM 6.5.26 - Cross-Site Scripting
webapps php 80 CVE-2018-17784

hyp3rlinx Microsoft SQL Server Management Studio 17.9 - '.xmla' XML External Entity Injection
local windows CVE-2018-8532