ElSoufiane Xitami Web Server 2.5 - Remote Buffer Overflow (SEH + Egghunter)
remote windows 80

Gilson Camelo ReadyAPI 2.5.0 / 2.6.0 - Remote Code Execution
webapps multiple CVE-2018-20580

Alejandro Fanjul LG Supersign EZ CMS - Remote Code Execution (Metasploit)
remote hardware 9080 CVE-2018-17173

hash3liZer WordPress Plugin Social Warfare < 3.5.3 - Remote Code Execution
webapps php CVE-2019-9978

Dino Barlattani SolarWinds DameWare Mini Remote Control 10.0 - Denial of Service
dos windows CVE-2019-9017

Paolo Serracino_ Pietro Minniti_ Damiano Proietti Blue Angel Software Suite - Command Execution
remote linux

hyp3rlinx Microsoft Windows PowerShell ISE - Remote Code Execution
remote windows

Ramòn Janssen Zotonic < 0.47.0 mod_admin - Cross-Site Scripting
webapps multiple CVE-2019-11504

Veyselxan Instagram Auto Follow - Authentication Bypass
webapps php

Jacob Baines Crestron AM/Barco wePresent WiPG/Extron ShareLink/Teq AV IT/SHARP PN-L703WA/Optoma WPS-Pro/Blackbox HD WPS/InFocus LiteShow - Remote Command Injection
webapps hardware CVE-2019-3929

Metasploit Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)
remote linux 3000 CVE-2019-5420

DKM CentOS Web Panel 0.9.8.793 (Free) / v0.9.8.753 (Pro) / 0.9.8.807 (Pro) - Domain Field (Add DNS Zone) Cross-Site Scripting
webapps linux CVE-2019-11429

Metasploit Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)
remote php CVE-2019-10867

Metasploit Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)
remote php CVE-2019-10867

Metasploit AIS logistics ESEL-Server - Unauthenticated SQL Injection Remote Code Execution (Metasploit)
remote windows CVE-2019-10123

Google Security Research Linux - Missing Locking Between ELF coredump code and userfaultfd VMA Modification
dos linux CVE-2019-11599