Hans Topo & g0tmi1k Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution
webapps php 80 CVE-2018-7600

Vitalii Rudnykh Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)
webapps php CVE-2018-7600

Sairam Jetty Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)
webapps php CVE-2018-10063

ManhNho WordPress Plugin File Upload 4.3.3 - Stored Cross-Site Scripting (PoC)
webapps php CVE-2018-9844

ManhNho WordPress Plugin File Upload 4.3.2 - Stored Cross-Site Scripting
webapps php CVE-2018-9172

SlidingWindow Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control
webapps linux CVE-2018-1217

taoge WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add User)
webapps php

taoge WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add Admin)
webapps php CVE-2018-9926

Stefan Broeder WordPress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting
webapps php CVE-2018-8729

ManhNho iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting
webapps php CVE-2018-9237;CVE-2018-9236

Lenon Leite WordPress Plugin Google Drive 2.2 - Remote Code Execution
webapps php

ManhNho iScripts SonicBB 1.0 - Reflected Cross-Site Scripting (PoC)
webapps php CVE-2018-9235

Lenon Leite WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution
webapps php

Lenon Leite Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution
webapps php

LiquidWorm KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)
webapps linux

LiquidWorm KYOCERA Multi-Set Template Editor 3.4 - Out-Of-Band XML External Entity Injection
webapps xml