Dmitry Chastuhin Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal
webapps multiple CVE-2018-2636

Ihsan Sencan Joomla! Component JMS Music 1.1.1 - SQL Injection
webapps php CVE-2018-6581

Ihsan Sencan Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload
webapps php CVE-2018-6580

Ihsan Sencan Joomla! Component JEXTN Classified 1.0.0 - 'sid' SQL Injection
webapps php CVE-2018-6575

Ihsan Sencan Joomla! Component JEXTN Reverse Auction 3.1.0 - SQL Injection
webapps php CVE-2018-6579

Ihsan Sencan Event Manager 1.0 - SQL Injection
webapps php CVE-2018-6576

Ihsan Sencan Joomla! Component JE PayperVideo 3.0.0 - 'usr_plan' SQL Injection
webapps php CVE-2018-6578

1n3 IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting
webapps aspx

8bitsec Advance Loan Management System - 'id' SQL Injection
webapps php

8bitsec Real Estate Custom Script - 'route' SQL Injection
webapps php

8bitsec Fancy Clone Script - 'search_browse_product' SQL Injection
webapps php

Ihsan Sencan Joomla! Component JEXTN Membership 3.1.0 - 'usr_plan' SQL Injection
webapps php CVE-2018-6577

bashis Geovision Inc. IP Camera & Video - Remote Command Execution
remote hardware

bashis Geovision Inc. IP Camera/Video/Access Control - Multiple Remote Command Execution / Stack Overflow / Double Free / Unauthorized Access
remote hardware

Metasploit BMC Server Automation RSCD Agent - NSH Remote Command Execution (Metasploit)
remote multiple CVE-2016-1543;CVE-2016-1542

Google Security Research WebKit - 'WebCore::FrameView::clientToLayoutViewportPoint' Use-After-Free
dos multiple