Dino Barlattani Zimbra 8.6.0_GA_1153 - Cross-Site Scripting
webapps php CVE-2016-3411

Javier Enrique Rodriguez Gutierrez iSmartViewPro 1.5 - 'Password' Buffer Overflow
local windows_x86-64

Andrey Konovalov Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) - (KASLR & SMEP Bypass) Arbitrary File Read
local linux CVE-2017-18344.

Joachim De Zutter reSIProcate 1.10.2 - Heap Overflow
dos multiple 5061 CVE-2018-12584

VortexNeoX64 Soroush IM Desktop App 0.17.0 - Authentication Bypass
local windows

Rajwinder Singh osTicket 1.10.1 - Arbitrary File Upload
webapps windows CVE-2017-15580

Rodrigo Eduardo Rodriguez iSmartViewPro 1.5 - 'Device Alias' Buffer Overflow
local windows_x86-64

Rodrigo Eduardo Rodriguez QNap QVR Client 5.0.3.23100 - Denial of Service (PoC)
dos windows_x86-64

Cody Zacharias OpenEMR 5.0.1.3 - Remote Code Execution (Authenticated)
webapps php 80

Ranjeet Jaiswal Open-AudIT Community 2.2.6 - Cross-Site Scripting
webapps windows CVE-2018-14493

Gionathan Reale Wavemaker Studio 6.6 - Server-Side Request Forgery
webapps java CVE-2019-8982

r3m0t3nu11 onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)
webapps php 443

Chris Sitecore.Net 8.1 - Directory Traversal
webapps aspx CVE-2018-7669

Google Security Research cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal
webapps cgi 80

Chris Moberly Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13415

Chris Moberly Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13417