Google Security Research macOS XNU - Missing Locking in checkdirs_callback() Enables Race with fchdir_common()
dos macos

Google Security Research WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive
dos multiple

Google Security Research JavaScriptCore - Type Confusion During Bailout when Reconstructing Arguments Objects
dos multiple CVE-2019-8820

Fabian Mosch_ Nick Theisinger SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
webapps aspx 80

Diego Armando Buztamante Rico Blue Stacks App Player 2.4.44.62.57 - _BstHdLogRotatorSvc_ Unquote Service Path
local windows

Gustavo Briseño Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
local windows

Ozer Goker ownCloud 10.3.0 stable - Cross-Site Request Forgery
webapps linux

Google Security Research JavaScriptCore - GetterSetter Type Confusion During DFG Compilation
dos multiple CVE-2019-8765

Vahagn Vardanyan Citrix StoreFront Server 7.15 - XML External Entity Injection
webapps xml

Alberto Vargas Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
local windows

Lance Biggerstaff Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
remote windows

Google Security Research WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed
dos multiple

Alessandro Groppo Joomla! 3.4.6 - Remote Code Execution (Metasploit)
webapps php

WangYihang Linux/x86 - execve(/bin/sh) Socket Reuse Shellcode (42 bytes)
linux_x86

Google Security Research Adobe Acrobat Reader DC for Windows - Heap-Based Buffer Overflow due to Malformed JP2 Stream (2)
dos windows CVE-2019-8197

Alessandro Groppo Joomla! 3.4.6 - Remote Code Execution
webapps php