Nawaf Alkeraithe Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)
webapps php 80

hyp3rlinx FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
webapps windows CVE-2018-16252

Autism_JH DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)
webapps php CVE-2018-15844

cakes Vox TG790 ADSL Router - Cross-Site Scripting
webapps hardware 443

Emre ÖVÜNÇ Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting
webapps windows_x86-64 80 CVE-2018-16134

Renos Nikolaou WordPress Plugin Quizlord 2.0 - Cross-Site Scripting
webapps php 80

Kevin Randall DLink DIR-601 - Credential Disclosure
webapps hardware CVE-2018-12710

Renos Nikolaou WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting
webapps php 80

Emre ÖVÜNÇ Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal
webapps windows_x86-64 443 CVE-2018-16133

hyp3rlinx Argus Surveillance DVR 4.0.0.0 - Directory Traversal
webapps windows_x86 8080 CVE-2018-15745

Jonas Lejon Episerver 7 patch 4 - XML External Entity Injection
webapps hardware

VulnSpy phpMyAdmin 4.7.x - Cross-Site Request Forgery
webapps php 80 CVE-2017-1000499

Lydéric Lefebvre WordPress Plugin Plainview Activity Monitor 20161228 - (Authenticated) Command Injection
webapps php 80 CVE-2018-15877

Simon Uvarov Responsive FileManager < 9.13.4 - Directory Traversal
webapps php 80 CVE-2018-15536;CVE-2018-15535

Yorick Koster Seagate Personal Cloud SRN21C 4.3.16.0 / 4.3.18.0 - SQL Injection
webapps hardware

Haboob Team LiteCart 2.1.2 - Arbitrary File Upload
webapps php