Guilherme Assmann Joomla! Component Ek Rishta 2.10 - SQL Injection
webapps php CVE-2018-12254

h0n1gsp3cht Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload
webapps php

bay0net MACCMS 10 - Cross-Site Request Forgery (Add User)
webapps php CVE-2018-12114

defensecode WordPress Plugin Ultimate Form Builder Lite < 1.3.7 - SQL Injection
webapps php

defensecode WordPress Plugin Google Map < 4.0.4 - SQL Injection
webapps php

Huy Kha Canon PrintMe EFI - Cross-Site Scripting
webapps php CVE-2018-12111

Open-Xchange OX App Suite 7.8.4 - Multiple Vulnerabilities
webapps xml CVE-2018-5756;CVE-2018-5755;CVE-2018-5754;CVE-2018-5753;CVE-2018-5752;CVE-2018-5751;CVE-2017-17062

Open-Xchange OX App Suite 7.8.4 - Multiple Vulnerabilities
webapps xml CVE-2018-5756;CVE-2018-5755;CVE-2018-5754;CVE-2018-5753;CVE-2018-5752;CVE-2018-5751;CVE-2017-17062

L0RD Joomla! Component EkRishta 2.10 - 'username' SQL Injection
webapps php

Space Duck Siaberry 1.2.2 - Command Injection
webapps hardware

M3@Pandas Schools Alert Management Script - Arbitrary File Read
webapps php CVE-2018-12054

M3@Pandas Schools Alert Management Script - 'get_sec.php' SQL Injection
webapps php CVE-2018-12052

Dolev Farhi userSpice 4.3.24 - Username Enumeration
webapps php

Dolev Farhi userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting
webapps php

M3@Pandas Schools Alert Management Script - Arbitrary File Deletion
webapps php CVE-2018-12053

41!kh4224rDz Joomla! Component EkRishta 2.10 - 'cid' SQL Injection
webapps php