LiquidWorm Intel Modular Server System 10.18 - Cross-Site Request Forgery (Change Admin Password)
webapps php

Rhino Security Labs Apache Tika-server < 1.18 - Command Injection
remote windows CVE-2018-1335

Metasploit elFinder PHP Connector < 2.1.48 - 'exiftran' Command Injection (Metasploit)
remote php CVE-2019-9194

Metasploit elFinder PHP Connector < 2.1.48 - 'exiftran' Command Injection (Metasploit)
remote php CVE-2019-9194

Gionathan Reale pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting
webapps php 443 CVE-2019-8953

Manuel García Cárdenas WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion
webapps php 80 CVE-2019-9618

Eduardo Braun Prado Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution
local windows CVE-2019-0541

Kevin Randall Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal
dos windows 21 CVE-2019-9648

Kevin Randall Core FTP Server FTP / SFTP Server v2 Build 674 - 'MDTM' Directory Traversal
dos windows 21 CVE-2019-9649

hyp3rlinx Microsoft Windows - '.reg' File / Dialog Box Message Spoofing
dos windows

Hodorsec Core FTP 2.0 build 653 - 'PBSZ' Denial of Service (PoC)
dos windows 21

Hodorsec Core FTP 2.0 build 653 - 'PBSZ' Denial of Service (PoC)
dos windows 21

Gionathan Reale PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin)
webapps php 80 CVE-2019-9769

Devin Casadey NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
local windows

wally0813 Linux Kernel 4.4 (Ubuntu 16.04) - 'snd_timer_user_ccallback()' Kernel Pointer Leak
dos linux CVE-2016-4578

redtimmysec Flexpaper PHP Publish Service 2.3.6 - Remote Code Execution
webapps php CVE-2018-11686