Ismail Tasdelen RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware 80 CVE-2018-15884

Mazin Ahmed Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (1)
remote linux 8080 CVE-2018-11776

Ismail Tasdelen ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting
webapps windows_x86-64 8080 CVE-2018-15740

Renos Nikolaou WordPress Plugin Gift Voucher 1.0.5 - (Authenticated) 'template_id' SQL Injection
webapps php 80

hook-s3c Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (2)
remote multiple 8080 CVE-2018-11776

L0RD Twitter-Clone 1 - 'userid' SQL Injection
webapps php 80

ManhNho WordPress Plugin Tagregator 0.6 - Cross-Site Scripting
webapps php 80 CVE-2018-10752

0xB9 MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Request Forgery
webapps php 80 CVE-2018-11502

Çlirim Emini WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection
webapps php 80

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

Aniket Dinda TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)
dos hardware 80 CVE-2018-15172

Kyle Lovett ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection
webapps cgi 8001 CVE-2018-11511;CVE-2018-11510;CVE-2018-11509

Wadeek TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)
webapps hardware 80

Wadeek TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Remote Reboot)
webapps hardware 80