KoreLogic HPE VAN SDN 2.7.18.0503 - Remote Root
webapps linux 8443

VulnSpy WordPress Core < 4.9.6 - (Authenticated) Arbitrary File Deletion
webapps php

Mehmet Ince Liferay Portal < 7.0.4 - Server-Side Request Forgery
webapps java 80

Çlirim Emini WordPress Plugin iThemes Security < 7.0.3 - SQL Injection
webapps php 80 CVE-2018-12636

Bhushan B. Patil WordPress Plugin Comments Import & Export < 2.0.4 - CSV Injection
webapps php 80 CVE-2018-11526

Samrat Das Intex Router N-150 - Arbitrary File Upload
webapps hardware

LiquidWorm Ecessa ShieldLink SL175EHQ < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
webapps hardware 443 CVE-2018-13032

Wadeek AsusWRT RT-AC750GF - Cross-Site Request Forgery (Change Admin Password)
webapps hardware 80

LiquidWorm Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
webapps hardware 443

Adipta Basu DIGISOL DG-BR4000NG - Cross-Site Scripting
webapps hardware 80 CVE-2018-12705

Samrat Das Intex Router N-150 - Cross-Site Request Forgery (Add Admin)
webapps hardware 80

LiquidWorm Ecessa Edge EV150 10.7.4 - Cross-Site Request Forgery (Add Superuser)
webapps linux 443

Bhushan B. Patil WordPress Plugin Advanced Order Export For WooCommerce < 1.5.4 - CSV Injection
webapps php 80 CVE-2018-11525

VulnSpy phpMyAdmin 4.8.1 - (Authenticated) Local File Inclusion (2)
webapps php 80 CVE-2018-12613

Berk Dusunur phpLDAPadmin 1.2.2 - 'server_id' LDAP Injection (Username)
webapps php 80

vr_system GreenCMS 2.3.0603 - Information Disclosure
webapps php CVE-2018-12604