8bitsec HRSALE The Ultimate HRM 1.0.2 - (Authenticated) Cross-Site Scripting
webapps php CVE-2018-10259

8bitsec HRSALE The Ultimate HRM 1.0.2 - 'award_id' SQL Injection
webapps php CVE-2018-10256

8bitsec HRSALE The Ultimate HRM 1.0.2 - CSV Injection
webapps php CVE-2018-10257

8bitsec Blog Master Pro 1.0 - CSV Injection
webapps php CVE-2018-10255

8bitsec Shopy Point of Sale 1.0 - CSV Injection
webapps php CVE-2018-10258

SEC Consult WSO2 Carbon / WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting
webapps java CVE-2018-8716

Lenon Leite WordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion
webapps php 80

Berk Cem Göksel Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure
webapps php CVE-2018-9245;CVE-2018-10286;CVE-2018-10285

devcoinfet Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass
webapps php CVE-2017-14322

Wenming Jiang Monstra CMS 3.0.4 - Arbitrary Folder Deletion
webapps php CVE-2018-9038

Sureshbabu Narvaneni Open-AudIT 2.1 - CSV Macro Injection
webapps windows CVE-2018-9137

jiguang WUZHI CMS 4.1.0 - Cross-Site Request Forgery
webapps php CVE-2018-10312

B0UG UK Cookie Consent - Persistent Cross-Site Scripting
webapps php CVE-2018-10310

Wenming Jiang Monstra cms 3.0.4 - Persitent Cross-Site Scripting
webapps php CVE-2018-10109

Larry W. Cashdollar Drupal avatar_uploader v7.x-1.0-beta8 - Arbitrary File Disclosure
webapps php CVE-2018-9205

r4wd3r Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation
webapps linux CVE-2017-12635