Todor Donev D-Link DSL-2640R - DNS Change
webapps hardware

Dennis Veninga Reservo Image Hosting Script 1.5 - Cross-Site Scripting
webapps php CVE-2018-5705

Tauco Zomato Clone Script - Arbitrary File Upload
webapps php

halfdog glibc < 2.26 - 'getcwd()' Local Privilege Escalation
local linux CVE-2018-1000001

SecuriTeam GitStack - Remote Code Execution
webapps php CVE-2018-5955

Pseudo Laboratories DarkComet (C2 Server) - File Upload
webapps multiple

GulfTech Security D-Link DNS-325 ShareCenter < 1.05B03 - Multiple Vulnerabilities
webapps php GTSA-00129

GulfTech Security D-Link DNS-343 ShareCenter < 1.05 - Command Injection
webapps php GTSA-00128

rtmcx Linux/ARM - Reverse (192.168.1.1:4444/TCP) Shell (/bin/sh) + Password (MyPasswd) + Null-Free Shellcode (156 bytes)
arm 156

mr_me Synology Photo Station 6.8.2-3461 - 'SYNOPHOTO_Flickr_MultiUpload' Race Condition File Write Remote Code Execution
remote hardware

Vulnerability-Lab Flash Operator Panel 2.31.03 - Command Execution
webapps php 80

ScrR1pTK1dd13 OBS Studio 20.1.3 - Local Buffer Overflow
dos windows

Florian Kunushevci ILIAS < 5.2.4 - Cross-Site Scripting
webapps php CVE-2018-5688

Vahagn Vardanyan Oracle PeopleSoft 8.5x - Remote Code Execution
webapps java CVE-2017-10366

hyp3rlinx Adminer 4.3.1 - Server-Side Request Forgery
webapps php

Andrew Gill Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect
webapps jsp CVE-2017-3528