hyp3rlinx NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage
webapps hardware CVE-2018-11742;CVE-2018-11741

Mohammed Abdul Raheem DomainMOD 4.11.01 - Owner name Field Cross-Site Scripting
webapps php 80 CVE-2018-19749

Leap Security OpenSSH < 7.7 - User Enumeration (2)
remote linux 22 CVE-2018-15473

0xdono Xorg X11 Server (AIX) - Local Privilege Escalation
local aix CVE-2018-14665

Luca.Chiou Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control Authentication Bypass
webapps hardware 80 CVE-2018-19616

nyxgeek Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download
dos windows CVE-2018-8474

Loading Kura Kura WordPress Plugin Advanced-Custom-Fields 5.7.7 - Cross-Site Scripting
webapps php 80

Ryan Delaney Budabot 4.0 - Denial of Service (PoC)
dos linux

David May Apache Superset < 0.23 - Remote Code Execution
webapps linux CVE-2018-8021

Javier Olmedo PHP Server Monitor 3.3.1 - Cross-Site Request Forgery
webapps php 80

SAIKUMAR CHEBROLU Mozilla Firefox 63.0.1 - Denial of Service (PoC)
dos windows

Ihsan Sencan Joomla! Component JE Photo Gallery 1.1 - 'categoryid' SQL Injection
webapps php 80

ParagonSec PaloAlto Networks Expedition Migration Tool 1.0.106 - Information Disclosure
webapps linux 80

Luca.Chiou Rockwell Automation Allen-Bradley PowerMonitor 1000 - Cross-Site Scripting
webapps hardware 80

AkkuS Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution
webapps php 80

Thomas Zuk CyberArk 9.7 - Memory Disclosure
remote windows 1858 CVE-2018-9842