SEC Consult Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14059;CVE-2018-14058;CVE-2018-14057

Aniket Dinda TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)
dos hardware 80 CVE-2018-15172

Kyle Lovett ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection
webapps cgi 8001 CVE-2018-11511;CVE-2018-11510;CVE-2018-11509

Metasploit Oracle GlassFish Server Open Source Edition 4.1 - Path Traversal (Metasploit)
webapps windows 4848 CVE-2017-1000028

Metasploit Oracle GlassFish Server Open Source Edition 4.1 - Path Traversal (Metasploit)
webapps windows 4848 CVE-2017-1000028

Wadeek TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)
webapps hardware 80

Wadeek TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Remote Reboot)
webapps hardware 80

Aniket Dinda TP-Link Wireless N Router WR840N - Denial of Service (PoC)
dos hardware 80

Safak Aslan LG-Ericsson iPECS NMS 30M - Directory Traversal
webapps linux 80

Cody Zacharias OpenEMR 5.0.1.3 - Remote Code Execution (Authenticated)
webapps php 80

Nikola Kojic LAMS < 3.1 - Cross-Site Scripting
webapps java 8080 CVE-2018-12090

Google Security Research cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal
webapps cgi 80

Ken Kitahara Linux/ARM - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (128 Bytes)
arm 128

Sarafraz Khan PHP Template Store Script 3.0.6 - Cross-Site Scripting
webapps php 80 CVE-2018-14869

Kartik Durg Linux/x86 - Reverse (::FFFF:192.168.1.5:4444/TCP) Shell (/bin/sh) + Null-Free + IPv6 Shellcode (86 bytes)
linux_x86 86

AkkuS PageResponse FB Inboxer Add-on 1.2 - 'search_field' SQL Injection
webapps php 80