Alfie Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit)
webapps hardware

L0RD Twitter-Clone 1 - 'userid' SQL Injection
webapps php 80

Sleepy Countly - Cross-Site Scripting
webapps php

ManhNho WordPress Plugin Tagregator 0.6 - Cross-Site Scripting
webapps php 80 CVE-2018-10752

0xB9 MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Request Forgery
webapps php 80 CVE-2018-11502

Çlirim Emini WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection
webapps php 80

Matthew Fulton ADM 3.1.2RHG1 - Remote Code Execution
webapps hardware 443 CVE-2018-11510

Maxim Yefimenko Mikrotik WinBox 6.42 - Credential Disclosure (golang)
webapps hardware

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

Javier Olmedo WordPress Plugin Export Users to CSV 1.1.1 - CSV Injection
webapps php

Joshua Fam OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions
webapps linux CVE-2018-15142;CVE-2018-15141;CVE-2018-15140

AmnBAN ASUS-DSL N10 1.1.2.2_17 - Authentication Bypass
webapps hardware

Kyle Lovett ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection
webapps cgi 8001 CVE-2018-11511;CVE-2018-11510;CVE-2018-11509

Dhiraj Mishra Oracle Glassfish OSE 4.1 - Path Traversal (Metasploit)
webapps linux CVE-2017-1000028