Securifera AMD Plays.tv 1.27.5.0 - 'plays_service.exe' Arbitrary File Execution
local windows CVE-2018-6546

FarazPajohan MikroTik 6.41.4 - FTP daemon Denial of Service (PoC)
dos linux CVE-2018-10070

Stefan Broeder WordPress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting
webapps php CVE-2018-8729

Noman Riffat FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
webapps hardware CVE-2018-9248

SyFi Adobe Flash < 28.0.0.161 - Use-After-Free
remote multiple CVE-2018-4878

Stefan Broeder WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting
webapps php CVE-2018-8729

Patrick Muench and Gregor Kopf Homematic CCU2 2.29.23 - Remote Command Execution
webapps cgi CVE-2018-7297

Stefan Broeder WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection
webapps php 80 CVE-2018-9035

Stefan Broeder WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting
webapps php 80 CVE-2018-9034

Patrick Muench and Gregor Kopf Homematic CCU2 2.29.23 - Arbitrary File Write
webapps cgi CVE-2018-7300

Sven Fassbender TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting
webapps multiple CVE-2018-7203

Sven Fassbender TwonkyMedia Server 7.0.11-8.5 - Directory Traversal
webapps multiple CVE-2018-7171

Fidus InfoSecurity DLINK DCS-5020L - Remote Code Execution (PoC)
webapps hardware CVE-2017-17020

SECFORCE OpenSSH < 6.6 SFTP - Command Execution
remote linux

Antonio Francesco Sardella Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution
webapps java CVE-2017-8046

Stefan Broeder WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
webapps php 80 CVE-2018-7543