Aetsu Alkacon OpenCMS 10.5.x - Local File inclusion
webapps multiple CVE-2019-13237

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)
webapps multiple CVE-2019-13236

Aetsu Alkacon OpenCMS 10.5.x - Cross-Site Scripting
webapps multiple CVE-2019-13235;CVE-2019-13234

MTK WordPress Plugin Event Tickets 4.10.7.1 - CSV Injection
webapps php

Nipun Somani Opencart 3.x - Cross-Site Scripting
webapps php CVE-2019-15081

James Bercegay Webmin < 1.920 - 'rpc.cgi' Remote Code Execution (Metasploit)
webapps linux

Damian Ebelties WordPress Plugin WooCommerce Product Feed 2.2.18 - Cross-Site Scripting
webapps php 80 CVE-2019-1010124

Damian Ebelties YouPHPTube 7.4 - Remote Code Execution
webapps php 80

Damian Ebelties DomainMod 4.13 - Cross-Site Scripting
webapps php CVE-2019-15811

creosote Sentrifugo 3.2 - Persistent Cross-Site Scripting
webapps php 80 CVE-2019-15814

creosote Sentrifugo 3.2 - File Upload Restriction Bypass
webapps php 80 CVE-2019-15813

Damian Ebelties PilusCart 1.4.1 - Local File Disclosure
webapps php 80

Damian Ebelties Jobberbase 2.0 - 'subscribe' SQL Injection
webapps php 80

Suvadip Kar Jobberbase 2.0 CMS - 'jobs-in' SQL Injection
webapps php 80

Rafael Pedrero SQLiteManager 1.2.0 / 1.2.4 - Blind SQL Injection
webapps php 80 CVE-2019-9083

Jarad Kopf Tableau - XML External Entity
webapps multiple CVE-2019-15637