nyxgeek Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download
dos windows CVE-2018-8474

Loading Kura Kura WordPress Plugin Advanced-Custom-Fields 5.7.7 - Cross-Site Scripting
webapps php 80

ParagonSec PaloAlto Networks Expedition Migration Tool 1.0.106 - Information Disclosure
webapps linux 80

Google Security Research VBScript - 'rtFilter' Out-of-Bounds Read
dos windows CVE-2018-8552

Google Security Research VBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free
dos windows CVE-2018-8544

Google Security Research WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the 'ForInContext' Object
dos multiple CVE-2018-4386

Google Security Research WebKit JIT - 'ByteCodeParser::handleIntrinsicCall' Type Confusion
dos multiple CVE-2018-4382

Google Security Research WebKit JSC JIT - 'JSPropertyNameEnumerator' Type Confusion
dos multiple CVE-2018-4416

Florian Bogner ELBA5 5.8.0 - Remote Code Execution
remote windows 2640

Loading Kura Kura No-Cms 1.0 - 'order_by' SQL Injection
webapps php 80

Google Security Research Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
local windows CVE-2018-8550

Google Security Research Microsoft Edge Chakra - OP_Memset Type Confusion
dos windows

Google Security Research Microsoft Edge Chakra - OP_Memset Type Confusion
dos windows

Google Security Research Linux - Broken uid/gid Mapping for Nested User Namespaces
local linux CVE-2018-18955

KoreLogic Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities
webapps linux CVE-2018-15768;CVE-2018-15767

Magnus Klaaborg Stubman ntpd 4.2.8p10 - Out-of-Bounds Read (PoC)
local linux CVE-2018-7182