prsecurity ARMBot Botnet - Arbitrary Code Execution
remote multiple

Metasploit Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
remote windows CVE-2018-1335

Google Security Research macOS iMessage - Heap Overflow when Deserializing
dos macos CVE-2019-8661

Kusol Watchara-Apanukorn 1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
webapps php 80 CVE-2019-14221

n1x_ Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
webapps php 80

Cemal Cihad ÇİFTÇİ Sar2HTML 3.2.1 - Remote Command Execution
webapps php 80

Alperen Soydan Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
webapps hardware 80

n1x_ WebIncorp ERP - SQL injection
webapps php 80

Metin Yunus Kandemir Ultimate Loan Manager 2.0 - Cross-Site Scripting
webapps multiple 80

Ian Bredemeyer SilverSHielD 6.x - Local Privilege Escalation
local multiple CVE-2019-13069

Lucas Dinucci Oracle Hyperion Planning 11.1.2.3 - XML External Entity
webapps multiple CVE-2019-2861

Metasploit Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
remote linux 6379

Google Security Research iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
dos multiple CVE-2019-8646

Google Security Research iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
dos multiple CVE-2019-8660

Google Security Research iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
dos multiple CVE-2019-8647

Google Security Research macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles
dos multiple CVE-2019-8672