TP-Link C50 Wireless Router 3 suffers from cross site request forgery vulnerability that allows for information disclosure.
Linux Kernel version 4.14.7 (Ubuntu 16.04 / CentOS 7) arbitrary file read exploit with KASLR and SMEP bypass.
MyBB Like Plugin 3.0.0 – Cross-Site Scripting
iSmartViewPro 1.5 – ‘Password’ Buffer Overflow
MyBB Thank You/Like Plugin 3.0.0 – Cross-Site Scripting
Zimbra 8.6.0_GA_1153 – Cross-Site Scripting
http://www.phuho.go.th/iq.txt notified by Ali Duzlawi097
QNap QVR Client version 5.0.3.23100 suffers from a denial of service vulnerability.
OpenEMR version 5.0.1.3 remote code execution exploit.