Seren PORSUK SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection
webapps php 80

Kacper Szurek Gitea 1.4.0 - Remote Code Execution
webapps multiple

L0RD ShopNx - Arbitrary File Upload
webapps php CVE-2018-12519

L0RD Online Trade - Information Disclosure
webapps php CVE-2018-12908

Mustafa Hasan CMS Made Simple 2.2.5 - (Authenticated) Remote Code Execution
webapps php CVE-2018-1000094

Kacper Szurek ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution
webapps java 8181

Ioannis Profetis ntop-ng < 3.4.180617 - Authentication Bypass
webapps lua CVE-2018-12520

om3rcitak Dolibarr ERP/CRM < 7.0.3 - PHP Code Injection
webapps php 80

bay0net DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80

ParagonSec VMware NSX SD-WAN Edge < 3.1.2 - Command Injection
webapps hardware CVE-2018-6961

RandoriSec Geutebruck 5.02024 G-Cam/EFD-2250 - 'simple_loglistjs.cgi' Remote Command Execution (Metasploit)
webapps hardware 80

Yassine Aboukir Cisco Adaptive Security Appliance - Path Traversal
webapps hardware CVE-2018-0296

Adipta Basu DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting
webapps hardware 80

Berk Dusunur hycus CMS 1.0.4 - Authentication Bypass
webapps php

Hzllaga HongCMS 3.0.0 - (Authenticated) SQL Injection
webapps php CVE-2018-12912

bay0net BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80 CVE-2018-12739