Google Security Research Android - 'getpidcon' Permission Bypass in KeyStore Service
dos android CVE-2017-13236

L0RD Entrepreneur Dating Script 2.0.2 - Authentication Bypass
webapps php 80

L0RD Online Test Script 2.0.7 - 'cid' SQL Injection
webapps php 80

Corben Leo Marked2 - Local File Disclosure
local multiple

L0RD Student Profile Management System Script 2.0.6 - Authentication Bypass
webapps php

res1n Claymore Dual GPU Miner 10.5 - Format String
dos multiple 3333 CVE-2018-6317

Barak Tawily WordPress Core - 'load-scripts.php' Denial of Service
dos php CVE-2018-6389

Bora Bozdogan NixCMS 1.0 - 'category_id' SQL Injection
webapps php

L0RD Matrimonial Website Script 2.1.6 - 'uid' SQL Injection
webapps php

Samrat Das Wonder CMS 2.3.1 - 'Host' Header Injection
webapps php CVE-2017-14523

Samrat Das Wonder CMS 2.3.1 - Unrestricted File Upload
webapps php CVE-2017-14521

Saar Amar Microsoft Windows Subsystem for Linux - 'execve()' Local Privilege Escalation
local windows CVE-2018-0743

r0ots3c FiberHome AN5506 - Remote DNS Change
webapps hardware

Dmitry Chastuhin Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal
webapps multiple CVE-2018-2636

0x4ndr3 Linux/x64 - execve(/bin/sh) + Twofish Encoded + DNS (CNAME) Password + Shellcode
linux_x86-64

Google Security Research WebKit - 'WebCore::FrameView::clientToLayoutViewportPoint' Use-After-Free
dos multiple