anhax0r Intelbras Telefone IP TIP200 LITE - Local File Disclosure
webapps hardware CVE-2018-9010

Z3ro0ne Contec Smart Home 4.15 - Unauthorized Password Reset
webapps hardware

Antonio Francesco Sardella Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution
webapps java CVE-2017-8046

Stefan Broeder WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
webapps php 80 CVE-2018-7543

Cristiano Maruti Tuleap 9.17.99.189 - Blind SQL Injection
webapps php CVE-2018-7538

SEC Consult SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
webapps aspx CVE-2018-7707;CVE-2018-7706;CVE-2018-7705;CVE-2018-7704;CVE-2018-7703;CVE-2018-7702;CVE-2018-7701

Clutchisback1 ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution
webapps windows

Chris Lyne Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution
webapps windows CVE-2017-16720

Manuel García Cárdenas TextPattern 4.6.2 - 'qty' SQL Injection
webapps php CVE-2018-7474

LiquidWorm Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials
webapps multiple

Mehmet Ince ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit)
webapps java CVE-2018-7890

Gustavo Sorondo Bacula-Web < 8.0.0-rc2 - SQL Injection
webapps php CVE-2017-15367

Joshua Bowser antMan 0.9.0c - Authentication Bypass
webapps java 3000 CVE-2018-7739

h0n1gsp3cht Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection
webapps php 80

Arvind V Bravo Tejari Web Portal - Cross-Site Request Forgery
webapps multiple CVE-2018-7216

SEC Consult ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection
webapps php 80