Javier Olmedo Sentrifugo HRMS 3.2 - 'deptid' SQL Injection
webapps windows

Ismail Tasdelen RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware 80 CVE-2018-15884

GunEggWang Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin)
webapps php 443 CVE-2018-15845

Ismail Tasdelen ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting
webapps windows_x86-64 8080 CVE-2018-15740

Renos Nikolaou WordPress Plugin Gift Voucher 1.0.5 - (Authenticated) 'template_id' SQL Injection
webapps php 80

Ismail Tasdelen ManageEngine ADManager Plus 6.5.7 - HTML Injection
webapps windows CVE-2018-15608

Renos Nikolaou UltimatePOS 2.5 - Remote Code Execution
webapps php

cakes Vox TG790 ADSL Router - Cross-Site Request Forgery (Add Admin)
webapps hardware

Berk Dusunur PCViewer vt1000 - Directory Traversal
webapps windows

L0RD Twitter-Clone 1 - 'code' SQL Injection
webapps php

Kamil Suska Geutebrueck re_porter 16 - Cross-Site Scripting
webapps hardware CVE-2018-15533

Kamil Suska Geutebrueck re_porter 7.8.974.20 - Credential Disclosure
webapps hardware CVE-2018-15534

Efrén Díaz KingMedia 4.1 - File Upload
webapps php

Samet ŞAHİN ZyXEL VMG3312-B10B - Cross-Site Scripting
webapps hardware

Mostafa Gharzi WordPress Plugin Ninja Forms 3.3.13 - CSV Injection
webapps php

L0RD Twitter-Clone 1 - Cross-Site Request Forgery (Delete Post)
webapps php