Nassim Asrir LW-N605R 12.20.2.1486 - Remote Code Execution
webapps hardware

Gionathan Reale iSmartViewPro 1.5 - 'SavePath for ScreenShots' Local Buffer Overflow (SEH)
local windows_x86

Mitsuaki Shiraishi QNAP Photo Station 5.7.0 - Cross-Site Scripting
webapps hardware CVE-2018-0715

Carlos Avila Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
webapps php

Sameer Goyal Tenable WAS-Scanner 7.4.1708 - Remote Command Execution
remote linux

Carlos Avila MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
webapps php 80

PUNIT DARJI D-Link Dir-600M N150 - Cross-Site Scripting
webapps hardware 80

Marko Jokic Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)
webapps linux CVE-2014-0030

Javier Olmedo Jorani Leave Management 0.6.5 - (Authenticated) 'startdate' SQL Injection
webapps php 80 CVE-2018-15918

ParagonSec Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation
local windows_x86-64 CVE-2018-0438;CVE-2018-0437

Javier Olmedo Jorani Leave Management 0.6.5 - Cross-Site Scripting
webapps php 80 CVE-2018-15917

LiquidWorm NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)
webapps xml

L0RD Microsoft People 10.1807.2131.0 - Denial of service (PoC)
dos windows_x86-64

vr_system FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution
remote hardware 9100

Reigning Shells RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution
webapps linux

Andrea Bocchetti mooSocial Store Plugin 2.6 - SQL Injection
webapps php