CVE-2018-15473

OpenSSH User Enum Exploit CVE-2018-15473

https://github.com/Rhynorater/CVE-2018-15473-Exploit

CVE-2018-10933

libSSH Auth Bypass Exploit CVE-2018-10933

https://paper.seebug.org/720/ https://github.com/blacknbunny/libSSH-Authentication-Bypass https://github.com/leapsecurity/libssh-scanner

CVE-2018-7600

Drupal v7.x + v8.x Remote Code Execution (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

https://github.com/dreadlocked/Drupalgeddon2

CVE-2018-11776

Apache Struts 2 Remote Code Execution CVE-2018-11776

https://github.com/mazen160/struts-pwn_CVE-2018-11776

CVE-2018-2894

WebLogic Unrestricted File Upload Remote Code Execution CVE-2018-2894

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/CVE%20Exploits/WebLogic%20CVE-2018-2894.py

CVE-2018-0296

Cisco ASA Directory Traversal CVE-2018-0296

https://github.com/yassineaboukir/CVE-2018-0296

CVE-2018-6789

Exim < 4.90.1 Remote Code Execution CVE-2018-6789

https://www.exploit-db.com/exploits/44571

CVE-2018-1111

DHCP Client Command Injection (DynoRoot) CVE-2018-1111

https://github.com/kkirsche/CVE-2018-1111

EDB-ID-44374

osCommerce 2.3.4.1 Installer Unauthenticated Code Execution

https://www.rapid7.com/db/modules/exploit/multi/http/oscommerce_installer_unauth_code_exec

CVE-2018-2628

Oracle Weblogic Server Deserialization RCE CVE-2018-2628

https://www.rapid7.com/db/modules/exploit/multi/misc/weblogic_deserialize

refer

https://xerosecurity.com/wordpress/top-10-remote-exploits-of-2018/