r3m0t3nu11 onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)
webapps php 443

Nikola Kojic LAMS < 3.1 - Cross-Site Scripting
webapps java 8080 CVE-2018-12090

Chris Sitecore.Net 8.1 - Directory Traversal
webapps aspx CVE-2018-7669

Zeel Chavda Subrion CMS 4.2.1 - Cross-Site Scripting
webapps php CVE-2018-14840

Google Security Research cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal
webapps cgi 80

Chris Moberly Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13415

Chris Moberly Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13417

Sarafraz Khan PHP Template Store Script 3.0.6 - Cross-Site Scripting
webapps php 80 CVE-2018-14869

Daniel Chactoura Seq 4.2.476 - Authentication Bypass
webapps windows CVE-2018-8096

Fakhri Zulkifli ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution
webapps hardware

Chris Moberly Universal Media Server 7.1.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13416

0x09AL CoSoSys Endpoint Protector 4.5.0.1 - (Authenticated) Remote Root Command Injection
webapps php

AkkuS PageResponse FB Inboxer Add-on 1.2 - 'search_field' SQL Injection
webapps php 80

AkkuS TI Online Examination System v2 - Arbitrary File Download
webapps php 80

Porhai Eung WityCMS 0.6.2 - Cross-Site Request Forgery (Password Change)
webapps php 80 CVE-2018-14029

0x616163 LG NAS 3718.510.a0 - Remote Command Execution
webapps hardware