Metasploit Jenkins - XStream Groovy classpath Deserialization (Metasploit)
remote multiple 8080 CVE-2016-0792

Metasploit Rancher Server - Docker Daemon Code Execution (Metasploit)
remote linux_x86-64 8080

Kacper Szurek QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass
webapps php 8080

Metasploit Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - 'Jakarta' Multipart Parser OGNL Injection (Metasploit)
remote multiple 8080 CVE-2017-5638

Mediaservice.net Srl. Red Hat JBoss EAP - Deserialization of Untrusted Data
webapps java 8080 CVE-2016-7065

LiquidWorm ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Directory Traversal
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Cross-Site Request Forgery (Add Superadmin)
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials SYSTEM Remote Code Execution
webapps jsp 8088

Guillaume Kaddouch Kodi Web Server 16.1 - Denial of Service
dos windows 8080

LiquidWorm Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities
webapps multiple 8088

LiquidWorm Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery (Add Advanced Admin)
webapps multiple 8088

LiquidWorm Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation
webapps multiple 8088

Metasploit Apache Continuum - Arbitrary Command Execution (Metasploit)
remote linux 8080

Metasploit Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution (Metasploit)
remote multiple 8080 CVE-2016-3087

Metasploit Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)
remote java 8088 CVE-2016-0492;CVE-2016-0491