roddux WordPress Core < 5.3.x - 'xmlrpc.php' Denial of Service
dos php

Lee Mazzoleni Linux/x64 - Reverse (192.168.55.42:443/TCP) Shell + Stager + Null-Free Shellcode (188 bytes)
linux_x86-64 188

Alessandro Magnosi NopCommerce 4.2.0 - Privilege Escalation
webapps aspx

Kevin Randall Netgear R6400 - Remote Code Execution
webapps hardware

MTK Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting
webapps java

Qualys Corporation OpenBSD 6.x - Dynamic Loader Privilege Escalation
local openbsd CVE-2019-19726

Google Security Research Linux 5.3 - Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds
local linux CVE-2019-19241

Sanyam Chawla D-Link DIR-615 - Privilege Escalation
webapps hardware CVE-2019-19743

Patrik Lantz Roxy Fileman 1.4.5 - Directory Traversal
webapps aspx CVE-2019-19731

Sanyam Chawla D-Link DIR-615 Wireless Router  -  Persistent Cross-Site Scripting
webapps hardware CVE-2019-19742

boku FTP Commander Pro 8.03 - Local Stack Overflow
local windows

boku FTP Commander Pro 8.03 - Local Stack Overflow
local windows

numan türle NVMS 1000 - Directory Traversal
webapps hardware

mr_me ManageEngine Desktop Central - 'FileStorage getChartImage' Deserialization / Unauthenticated Remote Code Execution
webapps multiple

numan türle Bullwark Momentum Series JAWS 1.0 - Directory Traversal
webapps php

Onur ER OpenNetAdmin 18.1.1 - Command Injection Exploit (Metasploit)
webapps php