Ramòn Janssen Zotonic < 0.47.0 mod_admin - Cross-Site Scripting
webapps multiple CVE-2019-11504

Veyselxan Instagram Auto Follow - Authentication Bypass
webapps php

Jacob Baines Crestron AM/Barco wePresent WiPG/Extron ShareLink/Teq AV IT/SHARP PN-L703WA/Optoma WPS-Pro/Blackbox HD WPS/InFocus LiteShow - Remote Command Injection
webapps hardware CVE-2019-3929

Metasploit Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)
remote linux 3000 CVE-2019-5420

DKM CentOS Web Panel 0.9.8.793 (Free) / v0.9.8.753 (Pro) / 0.9.8.807 (Pro) - Domain Field (Add DNS Zone) Cross-Site Scripting
webapps linux CVE-2019-11429

Metasploit Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)
remote php CVE-2019-10867

Metasploit Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)
remote php CVE-2019-10867

Metasploit AIS logistics ESEL-Server - Unauthenticated SQL Injection Remote Code Execution (Metasploit)
remote windows CVE-2019-10123

Google Security Research Linux - Missing Locking Between ELF coredump code and userfaultfd VMA Modification
dos linux CVE-2019-11599

Avinash Kumar Thapa Oracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution
webapps windows CVE-2019-2725

Hayden Wright DeviceViewer 3.12.0.1 - 'user' SEH Overflow
local windows CVE-2019-11563

Hayden Wright DeviceViewer 3.12.0.1 - 'user' SEH Overflow
local windows CVE-2019-11563

Victor Mondragón SpotAuditor 5.2.6 - 'Name' Denial of Service (PoC)
dos windows

Victor Mondragón SpotAuditor 5.2.6 - 'Name' Denial of Service (PoC)
dos windows

n4pst3r Agent Tesla Botnet - Information Disclosure
webapps php

saxgy1331 Hyvikk Fleet Manager - Shell Upload
webapps php