Valerio Brussani Liferay Portal 7.1 CE GA=3 / SimpleCaptcha API - Cross-Site Scripting
webapps jsp CVE-2019-6588

Riemann phpMyAdmin 4.8 - Cross-Site Request Forgery
webapps php CVE-2019-12616

xulchibalraa WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution
webapps php 80

Yonatan_Correa ProShow 9.0.3797 - Local Privilege Escalation
local windows CVE-2019-12788

Aron Mihaljevic Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (104 bytes)
linux_x86-64 104

s4vitar Ubuntu 18.04 - 'lxd' Privilege Escalation
local linux

Unk9vvN UliCMS 2019.1 'Spitting Lama' - Persistent Cross-Site Scripting
webapps php 80 CVE-2019-11398

SandboxEscaper Microsoft Windows - AppX Deployment Service Local Privilege Escalation (3)
local windows CVE-2019-0841

Aron Mihaljevic Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (131 bytes)
linux_x86-64 131

unamer VMware WorkStation 12.5.3 - Virtual Machine Escape
local windows CVE-2017-4905

Dhiraj Mishra Supra Smart Cloud TV - 'openLiveURL()' Remote File Inclusion
webapps hardware CVE-2019-12477

Qualys Corporation Exim 4.87 < 4.91 - (Local / Remote) Command Execution
remote linux CVE-2019-10149

Metasploit LibreNMS - addhost Command Injection (Metasploit)
remote linux CVE-2018-20434

Metasploit IBM Websphere Application Server - Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)
remote windows CVE-2019-8352;CVE-2019-4279

Google Security Research Google Chrome 73.0.3683.103 - 'WasmMemoryObject::Grow' Use-After-Free
dos multiple

k8gege Zimbra < 8.8.11 - XML External Entity Injection / Server-Side Request Forgery
webapps jsp CVE-2019-9621