RedTeam Pentesting CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution
webapps json CVE-2018-9843

Graeme Robinson WordPress Plugin Simple Fields 0.2 - 0.3.5 - Local/Remote File Inclusion / Remote Code Execution
webapps php 80

ManhNho Yahei PHP Prober 0.4.7 - Cross-Site Scripting
webapps php CVE-2018-9238

Sureshbabu Narvaneni WolfCMS 0.8.3.1 - Open Redirection
webapps php 80 CVE-2018-8813

Perileos MyBB Plugin Recent Threads On Index - Cross-Site Scripting
webapps php

ppb Cobub Razor 0.7.2 - Add New Superuser Account
webapps php CVE-2018-7745

Sureshbabu Narvaneni WolfCMS 0.8.3.1 - Cross-Site Request Forgery
webapps php CVE-2018-8814

Colette Chamberland WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal
webapps php CVE-2018-9118

ppb Cobub Razor 0.7.2 - Cross-Site Request Forgery
webapps php CVE-2018-7746

Esmaeil Rahimian DotNetNuke DNNarticle Module 11 - Directory Traversal
webapps windows CVE-2018-9126

Noman Riffat FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
webapps hardware CVE-2018-9248

Stefan Broeder WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting
webapps php CVE-2018-8729

Sureshbabu Narvaneni GetSimple CMS 3.3.13 - Cross-Site Scripting
webapps php CVE-2018-9173

zzw Z-Blog 1.5.1.1740 - Full Path Disclosure
webapps php CVE-2018-7737

zzw Z-Blog 1.5.1.1740 - Cross-Site Scripting
webapps php CVE-2018-7736

zzw YzmCMS 3.6 - Cross-Site Scripting
webapps php CVE-2018-7653