Hodorsec Anyburn 4.3 x86 - 'Copy disc to image file' Buffer Overflow (Unicode) (SEH)
local windows_x86

AkkuS QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)
remote hardware

Mehmet EMIROGLU Kados R10 GreenBee - Multiple SQL Injection
webapps php 80

Google Security Research Android - getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass
dos android CVE-2019-2023

Google Security Research Android - binder Use-After-Free via racy Initialization of ->allow_user_free
dos android CVE-2019-2025

Google Security Research Linux < 4.20.14 - Virtual Address 0 is Mappable via Privileged write() to /proc/*/mem
dos linux CVE-2019-9213

Mehmet EMIROGLU OpenDocMan 1.3.4 - 'search.php where' SQL Injection
webapps php 80

Daniele Votta Linux/x86 - XOR Encoder / Decoder execve(/bin/sh) Shellcode (45 bytes)
linux_x86 45

Tauco Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting
webapps hardware 80 CVE-2019-9556

ed0x21son WordPress Plugin Cerber Security_ Antispam & Malware Scan 8.0 - Multiple Bypass Vulnerabilities
webapps php 80

Ismail Tasdelen Craft CMS 3.1.12 Pro - Cross-Site Scripting
webapps php 80 CVE-2019-9554

Ismail Tasdelen Bolt CMS 3.6.4 - Cross-Site Scripting
webapps php 80 CVE-2019-9553

0v3rride MarcomCentral FusionPro VDP Creator < 10.0 - Directory Traversal
webapps windows CVE-2019-7751

Daniele Votta Linux/x86 - execve(/bin/sh) + NOT Encoder / Decoder Shellcode (44 bytes)
linux_x86 44

Aron Mihaljevic Linux/x64 - Kill All Processes Shellcode (11 bytes)
linux_x86-64 11

Cameron Brown Linux/x86 - Flush IPTables Rules (iptables -F) Shellcode (43 bytes)
linux_x86 43