Ismail Tasdelen dotCMS 5.1.1 - HTML Injection
webapps jsp

Alexandre Basquin Cortex Unshortenlink Analyzer < 1.1 - Server-Side Request Forgery
webapps multiple CVE-2019-7652

Ibrahim Raafat Zoho ManageEngine ADSelfService Plus 5.7 < 5702 build - Cross-Site Scripting
webapps php CVE-2018-20485;CVE-2018-20484

MobileNetworkSecurity NetNumber Titan ENUM/DNS/NP 7.9.1 - Path Traversal / Authorization Bypass
webapps linux

alt3kx Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting
webapps multiple 80 CVE-2019-10685

felipe andrian microASP (Portal+) CMS - 'pagina.phtml?explode_tree' SQL Injection
webapps asp 80

felipe andrian PHPads 2.0 - 'click.php3?bannerID' SQL Injection
webapps php 80

Gilson Camelo ReadyAPI 2.5.0 / 2.6.0 - Remote Code Execution
webapps multiple CVE-2018-20580

hash3liZer WordPress Plugin Social Warfare < 3.5.3 - Remote Code Execution
webapps php CVE-2019-9978

Ramòn Janssen Zotonic < 0.47.0 mod_admin - Cross-Site Scripting
webapps multiple CVE-2019-11504

Veyselxan Instagram Auto Follow - Authentication Bypass
webapps php

Jacob Baines Crestron AM/Barco wePresent WiPG/Extron ShareLink/Teq AV IT/SHARP PN-L703WA/Optoma WPS-Pro/Blackbox HD WPS/InFocus LiteShow - Remote Command Injection
webapps hardware CVE-2019-3929

DKM CentOS Web Panel 0.9.8.793 (Free) / v0.9.8.753 (Pro) / 0.9.8.807 (Pro) - Domain Field (Add DNS Zone) Cross-Site Scripting
webapps linux CVE-2019-11429

Avinash Kumar Thapa Oracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution
webapps windows CVE-2019-2725

n4pst3r Agent Tesla Botnet - Information Disclosure
webapps php

saxgy1331 Hyvikk Fleet Manager - Shell Upload
webapps php