B0UG WordPress Plugin Responsive Cookie Consent 1.7 / 1.6 / 1.5 - (Authenticated) Persistent Cross-Site Scripting
webapps php CVE-2018-10309

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733

Sairam Jetty WordPress Plugin Form Maker 1.12.20 - CSV Injection
webapps php CVE-2018-10504

SixP4ck3r Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)
webapps php CVE-2018-7602

SixP4ck3r Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)
webapps php CVE-2018-7602

Wenming Jiang Frog CMS 0.9.5 - Persistent Cross-Site Scripting
webapps php 80 CVE-2018-10321

Wadeek TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Remote Reboot
webapps hardware

Kacper Szurek GitList 0.6 - Remote Code Execution
webapps php

0xB9 MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting
webapps php 80 CVE-2018-10365

0xB9 October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
webapps php CVE-2018-10366

Sven Fassbender SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response
webapps linux CVE-2018-9160

Wadeek WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion
webapps php

Alessio Sergi Jfrog Artifactory < 4.16 - Arbitrary File Upload / Remote Command Execution
webapps linux CVE-2016-10036

Blaklis Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code Execution (PoC)
webapps php CVE-2018-7602;SA-CORE-2018-004

8bitsec HRSALE The Ultimate HRM 1.0.2 - Local File Inclusion
webapps php CVE-2018-10260