Sameer Goyal Tenable WAS-Scanner 7.4.1708 - Remote Command Execution
remote linux

Carlos Avila MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
webapps php 80

PUNIT DARJI D-Link Dir-600M N150 - Cross-Site Scripting
webapps hardware 80

Hamit CİBO WirelessHART Fieldgate SWG70 3.0 - Directory Traversal
webapps hardware CVE-2018-16059

Marko Jokic Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)
webapps linux CVE-2014-0030

Javier Olmedo Jorani Leave Management 0.6.5 - (Authenticated) 'startdate' SQL Injection
webapps php 80 CVE-2018-15918

ParagonSec Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation
local windows_x86-64 CVE-2018-0438;CVE-2018-0437

Javier Olmedo Jorani Leave Management 0.6.5 - Cross-Site Scripting
webapps php 80 CVE-2018-15917

LiquidWorm NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)
webapps xml

Sandip Dey Tenda ADSL Router D152 - Cross-Site Scripting
webapps hardware 80 CVE-2018-14497

L0RD Microsoft People 10.1807.2131.0 - Denial of service (PoC)
dos windows_x86-64

vr_system FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution
remote hardware 9100

Reigning Shells RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution
webapps linux

Andrea Bocchetti mooSocial Store Plugin 2.6 - SQL Injection
webapps php

Ken Kitahara Linux/ARM - execve(_/bin/sh__ NULL_ NULL) + read(0_ buf_ 0xff) Stager Shellcode (20 Bytes)
arm 20

Renos Nikolaou Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection
webapps php