Emil Lerner PHP-FPM + Nginx - Remote Code Execution
webapps php CVE-2019-11043

Google Security Research WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed
dos multiple

SYANiDE ChaosPro 2.0 - Buffer Overflow (SEH)
local windows

cakes delpino73 Blue-Smiley-Organizer 1.32 - 'datetime' SQL Injection
webapps php

Roberto Escamilla JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
local windows

cakes waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting
webapps php

Marvoloo Part-DB 0.4 - Authentication Bypass
webapps php

cakes waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection
webapps php

Prof. Joas Antonio Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery
webapps hardware

İbrahim Hakan Şeker ClonOs WEB UI 19.09 - Improper Access Control
webapps php CVE-2019-18418

Metasploit Linux Polkit - pkexec helper PTRACE_TRACEME local root (Metasploit)
local linux CVE-2019-13272

Luca.Chiou AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection
webapps hardware

Luca.Chiou AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control
webapps hardware

Lucian Ioan Nitescu WordPress Plugin Sliced Invoices 3.8.2 - 'post' SQL Injection
webapps php

Alessandro Groppo Joomla! 3.4.6 - Remote Code Execution (Metasploit)
webapps php

Sainadh Jamalpur IObit Uninstaller 9.1.0.8 - 'IObitUnSvr' Unquoted Service Path
local windows