Javier Olmedo WordPress Plugin All In One Favicon 4.6 - (Authenticated) Cross-Site Scripting
webapps php 80 CVE-2018-13832

Vitalii Rudnykh Modx Revolution < 2.6.4 - Remote Code Execution
webapps php

AkkuS FTP2FTP 1.0 - Arbitrary File Download
webapps php

Ranjeet Jaiswal Open-AudIT Community 2.1.1 - Cross-Site Scripting
webapps multiple CVE-2018-11124

Kacper Szurek HomeMatic Zentrale CCU2 - Remote Code Execution
remote hardware

AkkuS Smart SMS & Email Manager 3.3 - 'contact_type_id' SQL Injection
webapps php 80

Metasploit Nanopool Claymore Dual Miner - APIs Remote Code Execution (Metasploit)
remote multiple 3333 CVE-2018-1000049

Metasploit Nanopool Claymore Dual Miner - APIs Remote Code Execution (Metasploit)
remote multiple 3333 CVE-2018-1000049

Metasploit QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)
remote linux 443 CVE-2018-0707;CVE-2018-0706

Metasploit QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)
remote linux 443 CVE-2018-0707;CVE-2018-0706

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Restricted Shell Escape
local hardware

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials
remote hardware

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Remote Root
webapps hardware

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - File Manipulation
webapps hardware

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download
webapps hardware

LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Denial of Service
dos hardware