TrendyTofu HPE iMC 7.3 - Remote Code Execution (Metasploit)
remote windows CVE-2017-8982;CVE-2017-12500

Mattia Furlani VirtueMart 3.1.14 - Persistent Cross-Site Scripting
webapps php CVE-2018-7465

Nuno Freitas Linux/x86 - Read /etc/passwd Shellcode (62 bytes)
linux_x86 62

Raffaele Sabato Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery
webapps hardware CVE-2018-6023

Nuno Freitas Linux/x86 - execve(/bin/sh) + NOT Encoded Shellcode (27 bytes)
linux_x86 27

Youssef Mami CSP MySQL User Manager 2.3.1 - Authentication Bypass
webapps linux CVE-2018-10757

ezelf TBK DVR4104 / DVR4216 - Credentials Leak
remote hardware CVE-2018-9995

Alex Inführ Adobe Reader PDF - Client Side Request Injection
local windows

Sven Fassbender SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response
webapps linux CVE-2018-9160

Nuno Freitas Linux/x86 - execve(/bin/sh) + ROT-13/RShift-2/XOR Encoded Shellcode (44 bytes)
linux_x86 44

devcoinfet Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass
webapps php CVE-2017-14322

brianwrf Oracle Weblogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.2 / 12.2.1.3 - Deserialization Remote Command Execution
remote multiple CVE-2018-2628

Federico Scalco WordPress Plugin Caldera Forms 1.5.9.1 - Cross-Site Scripting
webapps php 80 CVE-2018-7747

SadFud Lutron Quantum 2.0 - 3.2.243 - Information Disclosure
webapps hardware CVE-2018-8880

Frogy Sophos Cyberoam UTM CR25iNG - 10.6.3 MR-5 - Direct Object Reference
webapps jsp CVE-2016-7786

Florian Hauser Barco ClickShare CSE-200 - Remote Denial of Service
dos hardware 7100