Juan Prescotto CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
remote windows_x86-64

longer DomainMod 4.09.03 - 'sslpaid' Cross-Site Scripting
webapps php CVE-2018-11404

longer DomainMod 4.09.03 - 'oid' Cross-Site Scripting
webapps php CVE-2018-11403

BlackFog Team TP-Link TL-WR840N/TL-WR841N - Authenticaton Bypass
webapps hardware

CorryL Bitmain Antminer D3/L3+/S9 - Remote Command Execution
remote hardware CVE-2018-11220

AkkuS Baby Names Search Engine 1.0 - 'a' SQL Injection
webapps php

AkkuS My Directory 2.0 - SQL Injection / Cross-Site Scripting
webapps php

ManhNho Werewolf Online 0.8.8 - Information Disclosure
local android CVE-2018-11505

Nathu Nandwani ClipperCMS 1.3.3 - Cross-Site Scripting
webapps php CVE-2018-11332

AkkuS Listing Hub CMS 1.0 - SQL Injection
webapps php

AkkuS BookingWizz Booking System 5.5 - 'id' SQL Injection
webapps php

Meisam Monsef Lyrist - 'id' SQL Injection
webapps php

Hesam Bazvand Sharetronix CMS 3.6.2 - Cross-Site Request Forgery / Cross-Site Scripting
webapps php

Meisam Monsef Ingenious School Management System - 'id' SQL Injection
webapps php

AkkuS WordPress Plugin Booking Calendar 3.0.0 - SQL Injection / Cross-Site Scripting
webapps php

Federico Stange Symfony 2.7.0 < 4.0.10 - Denial of Service
dos php