Fakhri Zulkifli Redis-cli < 5.0 - Buffer Overflow (PoC)
local linux CVE-2018-12326

Dolev Farhi RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)
webapps linux

defensecode WordPress Plugin Ultimate Form Builder Lite < 1.3.7 - SQL Injection
webapps php

defensecode WordPress Plugin Google Map < 4.0.4 - SQL Injection
webapps php

Dolev Farhi userSpice 4.3.24 - Username Enumeration
webapps php

Dolev Farhi userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting
webapps php

KoF2002 Splunk < 7.0.1 - Information Disclosure
webapps linux CVE-2018-11409

defensecode WordPress Plugin Contact Form Maker 1.12.20 - SQL Injection
webapps php

defensecode WordPress Plugin Form Maker 1.12.24 - SQL Injection
webapps php

BlackFog Team TP-Link TL-WR840N/TL-WR841N - Authenticaton Bypass
webapps hardware

Meisam Monsef Lyrist - 'id' SQL Injection
webapps php

Meisam Monsef Ingenious School Management System - 'id' SQL Injection
webapps php

Federico Stange Symfony 2.7.0 < 4.0.10 - Denial of Service
dos php

Nuno Freitas Linux/x86 - Reverse (10.10.2.4:4444/TCP) Shell Shellcode (68 bytes)
linux_x86 68

Safak Aslan SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change
webapps hardware

Safak Aslan Merge PACS 7.0 - Cross-Site Request Forgery
webapps linux