Metasploit elFinder PHP Connector < 2.1.48 - 'exiftran' Command Injection (Metasploit)
remote php CVE-2019-9194

Gionathan Reale pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting
webapps php 443 CVE-2019-8953

Manuel García Cárdenas WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion
webapps php 80 CVE-2019-9618

Eduardo Braun Prado Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution
local windows CVE-2019-0541

Kevin Randall Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal
dos windows 21 CVE-2019-9648

Kevin Randall Core FTP Server FTP / SFTP Server v2 Build 674 - 'MDTM' Directory Traversal
dos windows 21 CVE-2019-9649

hyp3rlinx Microsoft Windows - '.reg' File / Dialog Box Message Spoofing
dos windows

Hodorsec Core FTP 2.0 build 653 - 'PBSZ' Denial of Service (PoC)
dos windows 21

Hodorsec Core FTP 2.0 build 653 - 'PBSZ' Denial of Service (PoC)
dos windows 21

Gionathan Reale PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin)
webapps php 80 CVE-2019-9769

Devin Casadey NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
local windows

wally0813 Linux Kernel 4.4 (Ubuntu 16.04) - 'snd_timer_user_ccallback()' Kernel Pointer Leak
dos linux CVE-2016-4578

redtimmysec Flexpaper PHP Publish Service 2.3.6 - Remote Code Execution
webapps php CVE-2018-11686

M4LV0 PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution
webapps windows 80 CVE-2018-9276

AkkuS OpenKM 6.3.2 < 6.3.7 - Remote Command Execution (Metasploit)
webapps jsp CVE-2019-11445

AkkuS Liferay CE Portal < 7.1.2 ga3 - Remote Command Execution (Metasploit)
webapps multiple CVE-2019-11444