Semen Alexandrovich Lyhin NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution
webapps json CVE-2019-5485

strider WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting
webapps php

Emilio Revelo SpotIE Internet Explorer Password Recovery 2.9.5 - 'Key' Denial of Service
dos windows

Google Security Research iMessage - Decoding NSSharedKeyDictionary Can Read Object Out of Bounds
dos ios CVE-2019-8641

Google Security Research Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service
dos windows

Nassim Asrir Pfsense 2.3.4 / 2.4.4-p3 - Remote Code Injection
webapps php CVE-2019-16701

Umang Raghuvanshi iOS < 12.4.1 - 'Jailbreak' Local Privilege Escalation
local ios CVE-2019-8605

Lazy Hacker HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure
remote watchos CVE-2019-5392

Sainadh Jamalpur Gila CMS < 1.11.1 - Local File Inclusion
webapps multiple CVE-2019-16679

Todor Donev Hisilicon HiIpcam V100R003 Remote ADSL - Credentials Disclosure
remote hardware

Emilio Revelo SpotIE Internet Explorer Password Recovery 2.9.5 - 'Key' Denial of Service
dos watchos

Noman Riffat Western Digital My Book World II NAS 1.02.12 - Authentication Bypass / Command Execution
webapps hardware CVE-2019-16399

Daniel Ortiz Linux/x86 - Bind (43690/TCP) + Null-Free Shellcode (53 Bytes)
linux_x86 53

Connor McGarr docPrint Pro 8.0 - SEH Buffer Overflow
local windows

Bogdan Kurinnoy Notepad++ < 7.7 (x64) - Denial of Service
dos windows_x86-64 CVE-2019-16294

Pankaj Kumar Thakur Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload
webapps cfm CVE-2016-10258