ax8 Msvod 10 - Cross-Site Request Forgery (Change User Information)
webapps php 80 CVE-2019-11375

ax8 74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
webapps php 80 CVE-2019-11374

Panagiotis Vagenas WordPress Plugin Contact Form Builder 1.0.67 - Cross-Site Request Forgery / Local File Inclusion
webapps php 80

Panagiotis Vagenas WordPress Plugin Contact Form Builder 1.0.67 - Cross-Site Request Forgery / Local File Inclusion
webapps php 80

Vahagn Vardanyan Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 - XML External Entity Injection
webapps windows CVE-2019-2616

Vahagn Vardanyan Oracle Business Intelligence 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 - Directory Traversal
webapps windows CVE-2019-2588

Haboob Team Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion
webapps php 80 CVE-2019-10945

Aaron Bishop Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 - Login Page Cross-Site Scripting
webapps hardware 80 CVE-2019-9955

InfinitumIT DirectAdmin 1.561 - Multiple Vulnerabilities
webapps php CVE-2019-11193

AkkuS ATutor < 2.2.4 - 'file_manager' Remote Code Execution (Metasploit)
webapps php CVE-2019-11446

Semen Alexandrovich Lyhin D-Link DI-524 V2.06RU - Multiple Cross-Site Scripting
webapps hardware 80 CVE-2019-11017

Julien Ahrens Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Unauthenticated Remote Code Execution
webapps php 443

Doğukan Karaciğer Ashop Shopping Cart Software - 'bannedcustomers.php?blacklistitemid' SQL Injection
webapps php 80

Operat0r ManageEngine ServiceDesk Plus 9.3 - User Enumeration
webapps java CVE-2019-10273

isdampe WordPress Plugin Limit Login Attempts Reloaded 2.7.4 - Login Limit Bypass
webapps php 80

Abdullah Çelebi Tradebox CryptoCurrency - 'symbol' SQL Injection
webapps php 80