Google Security Research macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
dos multiple CVE-2019-8662

Pedro Cabral Linux/x86 - execve(/bin/sh) + NOT +SHIFT-N+ XOR-N Encoded Shellcode (168 bytes)
linux_x86-64 168

rubyman WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery
webapps php 80 CVE-2019-14328

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection
webapps jsp 80 CVE-2019-10266

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
webapps jsp 443 CVE-2019-10267

Wietse Boonstra Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)
webapps jsp CVE-2019-10267

Fabian Mosch_ Nick Theisinger Moodle Filepicker 3.5.2 - Server Side Request Forgery
webapps php 80 CVE-2018-1042

ShivamTrivedi Microsoft Windows 7 build 7601 (x86) - Local Privilege Escalation
local windows_x86 CVE-2019-1132

Google Security Research WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads
dos multiple CVE-2019-8649

UserX Ovidentia 8.4.3 - SQL Injection
webapps php 80

Google Security Research Apple iMessage - DigitalTouch tap Message Processing Out-of-Bounds Read
dos watchos CVE-2019-8624

Marcin Kozlowski Android 7 < 9 - Remote Code Execution
remote android CVE-2019-2107

hyp3rlinx Trend Micro Deep Discovery Inspector IDS - Security Bypass
remote multiple

Mehmet Onder Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery
webapps hardware CVE-2019-12624

Kağan Çapar Linux/x86_64 - Wget Linux Enumeration Script Shellcode (155 Bytes)
linux_x86-64 155

Dominik Penner Axway SecureTransport 5 - Unauthenticated XML Injection
webapps linux