D.Goedecke Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path
local windows

Pablo Santiago oXygen XML Editor 21.1.1 - XML External Entity Injection
local windows

Riccardo Gasparini Fastweb Fastgate 0.00.81 - Remote Code Execution
webapps hardware

sasaga92 Control Center PRO 6.2.9 - Local Stack Based Buffer Overflow (SEH)
local windows

Cy83rl0gger Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting
webapps aspx CVE-2018-12653

Mario Rodriguez Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path
local windows

Cy83rl0gger Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting
webapps aspx CVE-2018-12650

Cy83rl0gger Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting
webapps aspx CVE-2018-12234

Google Security Research Adobe Acrobat Reader DC for Windows - Use of Uninitialized Pointer due to Malformed OTF Font (CFF Table)
dos windows CVE-2019-8196

Google Security Research Adobe Acrobat Reader DC for Windows - Use of Uninitialized Pointer due to Malformed JBIG2Globals Stream
dos windows CVE-2019-8195

Google Security Research iMessage - Decoding NSSharedKeyDictionary can read ObjC Object at Attacker Controlled Address
dos multiple CVE-2019-8662;CVE-2019-8641

Sem Voigtlander iOS IOUSBDeviceFamily 12.4.1 - 'IOInterruptEventSource' Heap Corruption (PoC)
dos ios

Héctor Gabriel Chimecatl Hernández Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
local windows

Ozer Goker Nextcloud 17 - Cross-Site Request Forgery
webapps php

Pablo Santiago Adive Framework 2.0.7 - Privilege Escalation
webapps php CVE-2019-14347

Carlos A Garcia R SolarWinds Kiwi Syslog Server 8.3.52 - 'Kiwi Syslog Server' Unquoted Service Path
local windows