Dominik Penner EA Origin < 10.5.38 - Remote Code Execution
remote windows CVE-2019-12828

Google Security Research Linux - Use-After-Free via race Between modify_ldt() and #BR Exception
dos linux

Aaron Bishop BlogEngine.NET 3.3.6/3.3.7 - XML External Entity Injection
webapps aspx

Semen Alexandrovich Lyhin WebERP 4.15 - SQL injection
webapps php CVE-2019-13292

Aaron Bishop BlogEngine.NET 3.3.6/3.3.7 - 'theme Cookie' Directory Traversal / Remote Code Execution
webapps aspx

Aaron Bishop BlogEngine.NET 3.3.6/3.3.7 - 'dirPath' Directory Traversal / Remote Code Execution
webapps aspx

Aron Mihaljevic Linux/x86_64 - execve(/bin/sh) Shellcode (22 bytes)
linux_x86-64 22

Goutham Madhwaraj Sahi pro 8.x - Cross-Site Scripting
webapps multiple CVE-2018-20472

Goutham Madhwaraj Sahi pro 8.x - SQL Injection
webapps multiple CVE-2018-20469

Goutham Madhwaraj Sahi pro 7.x/8.x - Directory Traversal
webapps multiple CVE-2018-20470

Riemann Spring Security OAuth - Open Redirector
webapps java CVE-2019-3778;CVE-2019-11269

Marco Ivaldi Exim 4.87 - 4.91 - Local Privilege Escalation
local linux CVE-2019-10149

hyp3rlinx HC10 HC.Server Service 10.14 - Remote Invalid Pointer Write
dos windows CVE-2019-12323

s4vitar CentOS 7.6 - 'ptrace_scope' Privilege Escalation
local linux

Jarad Kopf Sitecore 8.x - Deserialization Remote Code Execution
webapps aspx CVE-2019-11080

Valerio Brussani Liferay Portal 7.1 CE GA=3 / SimpleCaptcha API - Cross-Site Scripting
webapps jsp CVE-2019-6588