LiquidWorm Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Cross-Site Request Forgery
webapps hardware 80

Charles Fol PrestaShop < 1.6.1.19 - 'BlowFish ECD' Privilege Escalation
webapps php CVE-2018-13784

Charles Fol PrestaShop < 1.6.1.19 - 'AES CBC' Privilege Escalation
webapps php CVE-2018-13784

Google Security Research Linux (Ubuntu) - Other Users coredumps Can Be Read via setgid Directory and killpriv Bypass
dos linux CVE-2018-13405

Google Security Research macOS/iOS - JavaScript Injection Bug in OfficeImporter
dos multiple

Berk Dusunur WordPress Plugin Job Manager 4.1.0 - Cross-Site Scripting
webapps php

Miguel Mendez Z VelotiSmart WiFi B-380 Camera - Directory Traversal
webapps hardware 80 CVE-2018-14064

alt3kx Fortify Software Security Center (SSC) 17.x/18.1 - XML External Entity Injection
webapps java CVE-2018-12463

hyp3rlinx Microsoft Enterprise Mode Site List Manager - XML External Entity Injection
local windows

Metasploit Hadoop YARN ResourceManager - Command Execution (Metasploit)
remote linux 8088

Metasploit Hadoop YARN ResourceManager - Command Execution (Metasploit)
remote linux 8088

Metasploit Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit)
local windows CVE-2018-8897

Metasploit Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit)
local windows CVE-2018-8897

t4rkd3vilz Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery
webapps hardware CVE-2018-13989

Safak Aslan Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload
webapps hardware CVE-2018-15137

Metasploit phpMyAdmin - (Authenticated) Remote Code Execution (Metasploit)
remote php 80 CVE-2018-12613