Google Security Research Microsoft Edge Chakra JIT - Bound Check Elimination Bug
dos windows CVE-2018-0980

Kevin Kirsche DynoRoot DHCP Client - Command Injection
local linux CVE-2018-1111

L0RD Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery
webapps php

Nassim Asrir Cisco SA520W Security Appliance - Path Traversal
webapps hardware

crash_manucoot Prime95 29.4b8 - Stack Buffer Overflow (SEH)
local windows

TrendyTofu HPE iMC 7.3 - Remote Code Execution (Metasploit)
remote windows CVE-2017-8982;CVE-2017-12500

Richard Alviarez SAP NetWeaver Web Dynpro 6.4 < 7.5 - Information Disclosure
webapps linux

Berk Dusunur Monstra CMS < 3.0.4 - Cross-Site Scripting (2)
webapps php

L0RD Healwire Online Pharmacy 3.0 - Cross-Site Scripting / Cross-Site Request Forgery
webapps php

Metasploit Apache Struts 2 - Struts 1 Plugin Showcase OGNL Code Execution (Metasploit)
remote multiple 8080 CVE-2017-9791

Metasploit Apache Struts 2 - Struts 1 Plugin Showcase OGNL Code Execution (Metasploit)
remote multiple 8080 CVE-2017-9791

Metasploit Jenkins CLI - HTTP Java Deserialization (Metasploit)
remote linux 8080 CVE-2016-9299

Metasploit Jenkins CLI - HTTP Java Deserialization (Metasploit)
remote linux 8080 CVE-2016-9299

Google Security Research Linux < 4.16.9 / < 4.14.41 - 4-byte Infoleak via Uninitialized Struct Field in compat adjtimex Syscall
dos linux

t4rkd3vilz Powerlogic/Schneider Electric IONXXXX Series - Cross-Site Request Forgery
webapps linux CVE-2016-5809

L0RD SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass
webapps php