hyp3rlinx Adminer 4.3.1 - Server-Side Request Forgery
webapps php

Andrew Gill Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect
webapps jsp CVE-2017-3528

Ahmad Mahfouz RISE 1.9 - 'search' SQL Injection
webapps php CVE-2017-17999

Ahmad Mahfouz PerfexCRM 1.9.7 - Arbitrary File Upload
webapps php CVE-2017-17976

Tauco Domains & Hostings Manager PRO 3.0 - Authentication Bypass
webapps php

Dennis Veninga ImgHosting 1.5 - Cross-Site Scripting
webapps php CVE-2018-5479

absolomb pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection
webapps php CVE-2014-4688

Tauco Taxi Booking Script 1.0 - Cross-site Scripting
webapps php

Dennis Veninga Xnami 1.0 - Cross-Site Scripting
webapps php CVE-2018-5370

Cr0n1c D-Link Routers 110/412/615/815 < 1.03 - 'service.cgi' Arbitrary Code Execution
webapps hardware

Vahagn Vardanyan SAP NetWeaver J2EE Engine 7.40 - SQL Injection
webapps multiple CVE-2016-2388;CVE-2016-2386;CVE-2016-1910

Mattia Furlani Joomla! Component Easydiscuss < 4.0.21 - Cross-Site Scripting
webapps php CVE-2018-5263

Panagiotis Vagenas WordPress Plugin WordPress Download Manager 2.9.60 - Cross-Site Request Forgery
webapps php 80

Panagiotis Vagenas WordPress Plugin Admin Menu Tree Page View 2.6.9 - Cross-Site Request Forgery / Privilege Escalation
webapps php 80

Panagiotis Vagenas WordPress Plugin CMS Tree Page View 1.4 - Cross-Site Request Forgery / Privilege Escalation
webapps php 80

Panagiotis Vagenas WordPress Plugin Social Media Widget by Acurax 3.2.5 - Cross-Site Request Forgery
webapps php 80