Cody Zacharias OpenEMR 5.0.1.3 - Remote Code Execution (Authenticated)
webapps php 80

Ranjeet Jaiswal Open-AudIT Community 2.2.6 - Cross-Site Scripting
webapps windows CVE-2018-14493

Gionathan Reale Wavemaker Studio 6.6 - Server-Side Request Forgery
webapps java CVE-2019-8982

Thiago Sena CMS ISWEB 3.5.3 - Directory Traversal
webapps php

r3m0t3nu11 onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)
webapps php 443

Nikola Kojic LAMS < 3.1 - Cross-Site Scripting
webapps java 8080 CVE-2018-12090

Chris Sitecore.Net 8.1 - Directory Traversal
webapps aspx CVE-2018-7669

Zeel Chavda Subrion CMS 4.2.1 - Cross-Site Scripting
webapps php CVE-2018-14840

Google Security Research cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal
webapps cgi 80

Chris Moberly Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13415

Chris Moberly Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13417

Sarafraz Khan PHP Template Store Script 3.0.6 - Cross-Site Scripting
webapps php 80 CVE-2018-14869

Daniel Chactoura Seq 4.2.476 - Authentication Bypass
webapps windows CVE-2018-8096

Fakhri Zulkifli ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution
webapps hardware

Chris Moberly Universal Media Server 7.1.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13416

0x09AL CoSoSys Endpoint Protector 4.5.0.1 - (Authenticated) Remote Root Command Injection
webapps php