Paul Taylor EMC RecoverPoint 4.3 - 'Admin CLI' Command Injection
local windows CVE-2018-1185

Tejesh Kolisetty Open-AudIT Community 2.2.0 - Cross-Site Scripting
webapps windows CVE-2018-10314

Tejesh Kolisetty Open-AudIT Professional - 2.1.1 - Cross-Site Scripting
webapps windows CVE-2018-9155

Metasploit Mantis Bug Tracker 1.1.3 - 'manage_proj_page' PHP Code Execution (Metasploit)
remote php 80 CVE-2008-4687

Souhail Hammou Dell Touchpad - 'ApMsgFwd.exe' Denial of Service
dos windows CVE-2018-10828

Nuno Freitas Linux/x86 - Read /etc/passwd Shellcode (62 bytes)
linux_x86 62

0xB9 MyBB Latest Posts on Profile Plugin 1.1 - Cross-Site Scripting
webapps php CVE-2018-10580

Trent Gordon ModbusPal 1.6b - XML External Entity Injection
webapps java CVE-2018-10832

Raffaele Sabato Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery
webapps hardware CVE-2018-6023

Achilles Allok Video Splitter 3.1.12.17 - Denial of Service
dos windows

hyp3rlinx Microsoft Windows FxCop 10/12 - XML External Entity Injection
local windows

Amine Kanane Linux/x86 - Bind (9443/TCP) Shell + fork() + Null-Free Shellcode (113 bytes)
linux_x86 113

anhkgg 2345 Security Guard 3.7 - '2345NetFirewall.sys' Denial of Service
dos windows_x86 CVE-2018-10809

Metasploit PlaySMS 1.4 - 'sendfromfile.php?Filename' (Authenticated) 'Code Execution (Metasploit)
remote php CVE-2017-9080

Metasploit PlaySMS - 'import.php' (Authenticated) CSV File Upload Code Execution (Metasploit)
remote php CVE-2017-9101

Metasploit Palo Alto Networks - 'readSessionVarsFromFile()' Session Corruption (Metasploit)
remote unix 443 CVE-2017-15944