LiquidWorm iSeeQ Hybrid DVR WH-H4 2.0.0.P - (get_jpeg) Stream Disclosure
webapps hardware

Vahagn Vardanyan Citrix StoreFront Server 7.15 - XML External Entity Injection
webapps xml

Onur ER Ajenti 2.1.31 - Remote Code Exection (Metasploit)
webapps json

Alberto Vargas Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
local windows

Askar rConfig 3.9.2 - Remote Code Execution
webapps php CVE-2019-16662

Lance Biggerstaff Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
remote windows

Emil Lerner PHP-FPM + Nginx - Remote Code Execution
webapps php CVE-2019-11043

Google Security Research WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed
dos multiple

Roberto Escamilla JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
local windows

Marvoloo Part-DB 0.4 - Authentication Bypass
webapps php

Prof. Joas Antonio Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery
webapps hardware

İbrahim Hakan Şeker ClonOs WEB UI 19.09 - Improper Access Control
webapps php CVE-2019-18418

Alessandro Groppo Joomla! 3.4.6 - Remote Code Execution (Metasploit)
webapps php

Sainadh Jamalpur IObit Uninstaller 9.1.0.8 - 'IObitUnSvr' Unquoted Service Path
local windows

RandoriSec Moxa EDR-810 - Command Injection / Information Disclosure
remote hardware CVE-2019-10969;CVE-2019-10963

Marco Ivaldi Solaris 11.4 - xscreensaver Privilege Escalation
local solaris CVE-2019-3010