Ranjeet Jaiswal Open-AudIT Community 2.2.6 - Cross-Site Scripting
webapps windows CVE-2018-14493

Manoj Ahuje CloudMe Sync 1.10.9 - Buffer Overflow (SEH)(DEP Bypass)
local windows_x86-64

Gionathan Reale Wavemaker Studio 6.6 - Server-Side Request Forgery
webapps java CVE-2019-8982

Thiago Sena CMS ISWEB 3.5.3 - Directory Traversal
webapps php

r3m0t3nu11 onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)
webapps php 443

Nikola Kojic LAMS < 3.1 - Cross-Site Scripting
webapps java 8080 CVE-2018-12090

Chris Sitecore.Net 8.1 - Directory Traversal
webapps aspx CVE-2018-7669

bzyo AgataSoft Auto PingMaster 1.5 - Buffer Overflow (SEH)
local windows

Zeel Chavda Subrion CMS 4.2.1 - Cross-Site Scripting
webapps php CVE-2018-14840

sickness & mschenk Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation
local windows_x86-64 CVE-2015-5736;CVE-2015-4077

Google Security Research cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal
webapps cgi 80

Metasploit Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)
local linux CVE-2017-1000112

Metasploit Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)
local linux CVE-2017-1000112

Chris Moberly Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13415

Chris Moberly Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection
webapps xml CVE-2018-13417

Ken Kitahara Linux/ARM - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (128 Bytes)
arm 128