Alex Inführ Adobe Reader PDF - Client Side Request Injection
local windows

Tenable NS Schneider Electric InduSoft Web Studio and InTouch Machine Edition - Denial of Service
dos windows

straight_blast Exim < 4.90.1 - 'base64d' Remote Code Execution
remote linux 25 CVE-2018-6789

Metasploit Metasploit Framework - 'msfd' Remote Code Execution (Metasploit)
remote ruby 55554

Metasploit Metasploit Framework - 'msfd' Remote Code Execution (via Browser) (Metasploit)
remote ruby 55554

Metasploit xdebug < 2.5.5 - OS Command Execution (Metasploit)
remote php 80

Qian Wu_ Bo Wang_ Jiawang Zhang Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery
webapps php 80 CVE-2018-9302

Google Security Research WebKit - 'WebCore::jsElementScrollHeightGetter' Use-After-Free
dos multiple CVE-2018-4200

Marwan Shamel Easy MPEG to DVD Burner 1.7.11 - Local Buffer Overflow (SEH)
local windows

Richard Davy LibreOffice/Open Office - '.odt' Information Disclosure
local windows CVE-2018-10583

B0UG WordPress Plugin Responsive Cookie Consent 1.7 / 1.6 / 1.5 - (Authenticated) Persistent Cross-Site Scripting
webapps php CVE-2018-10309

SecuriTeam Linux Kernel < 4.17-rc1 - 'AF_LLC' Double Free
dos linux

Google Security Research Apple macOS/iOS - ReportCrash mach port Replacement due to Failure to Respect MIG Ownership Rules
dos multiple CVE-2018-4206

Google Security Research Apple macOS 10.13.2 - Double mach_port_deallocate in kextd due to Failure to Comply with MIG Ownership Rules
dos macos CVE-2018-4139

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733