Ken Kitahara Linux/ARM - execve(_/bin/sh__ NULL_ NULL) + read(0_ buf_ 0xff) Stager Shellcode (20 Bytes)
arm 20

Renos Nikolaou Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection
webapps php

Luis Martínez iSmartViewPro 1.5 - 'DDNS' Buffer Overflow
local windows_x86

Luis Martínez iSmartViewPro 1.5 - 'DDNS' Buffer Overflow
local windows_x86

Nawaf Alkeraithe Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)
webapps php 80

Luis Martínez Trend Micro Virtual Mobile Infrastructure 5.5.1336 - 'Server address' Denial of Service (PoC)
dos ios

hyp3rlinx FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
webapps windows CVE-2018-16252

Luis Martínez Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service (PoC)
dos ios

Uriel Corral Salinas Visual Ping 0.8.0.0 - 'Host' Denial of Service (PoC)
dos windows_x86-64

Diego Santamaria VSAXESS V2.6.2.70 build 20171226_053 - 'Nickname' Denial of Service (PoC)
dos windows

hyp3rlinx Argus Surveillance DVR 4.0.0.0 - Privilege Escalation
local windows_x86

Ali Alipour Acunetix WVS Reporter 10.0 - Denial of Service (PoC)
dos windows_x86-64

Emre ÖVÜNÇ Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting
webapps windows_x86-64 80 CVE-2018-16134

Ken Kitahara Linux/ARM - execve(_/bin/sh__ NULL_ NULL) + read(0_ buf_ 0xff) Stager Shellcode (28 Bytes)
arm

Renos Nikolaou WordPress Plugin Quizlord 2.0 - Cross-Site Scripting
webapps php 80

Kevin Randall DLink DIR-601 - Credential Disclosure
webapps hardware CVE-2018-12710