Dayanç Soyadlı libSSH - Authentication Bypass
remote linux CVE-2018-10933

Ihsan Sencan OwnTicket 1.0 - 'TicketID' SQL Injection
webapps php

Alireza Norkazemi PHP-SHOP master 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80

Ihsan Sencan Learning with Texts 1.6.2 - 'start' SQL Injection
webapps php

Ihsan Sencan Time and Expense Management System 3.0 - 'table' SQL Injection
webapps php

LiquidWorm TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure
webapps hardware CVE-2018-18428

Ihsan Sencan Time and Expense Management System 3.0 - Cross-Site Request Forgery (Add Admin)
webapps php

LiquidWorm FLIR AX8 Thermal Camera 1.32.16 - Hard-Coded Credentials
remote hardware

Ismail Tasdelen BigTree CMS 4.2.23 - Cross-Site Scripting
webapps php 80 CVE-2018-18308

Abdullah Alıç Any Sound Recorder 2.93 - Buffer Overflow (SEH)
local windows_x86

Abdullah Alıç Any Sound Recorder 2.93 - Buffer Overflow (SEH)
local windows_x86

joernchen Git Submodule - Arbitrary Code Execution
local linux CVE-2018-17456

Metasploit VLC Media Player - MKV Use-After-Free (Metasploit)
local windows CVE-2018-11529

Metasploit VLC Media Player - MKV Use-After-Free (Metasploit)
local windows CVE-2018-11529

Metasploit Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
local solaris CVE-2017-3630;CVE-2017-3629;CVE-2017-1000364;CVE-2017-3631

Metasploit Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
local solaris CVE-2017-3630;CVE-2017-3629;CVE-2017-1000364;CVE-2017-3631