Metasploit DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)
remote windows CVE-2018-18326;CVE-2018-18325;CVE-2018-15812;CVE-2018-15811;CVE-2017-9822

Metasploit PlaySMS - index.php Unauthenticated Template Injection Code Execution (Metasploit)
remote php CVE-2020-8644

Metasploit Pandora FMS - Ping Authenticated Remote Code Execution (Metasploit)
remote linux

Metasploit ThinkPHP - Multiple PHP Injection RCEs (Metasploit)
remote linux CVE-2019-9082;CVE-2018-20062

Metasploit Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit)
remote java CVE-2020-7961

Metasploit TP-Link Archer A7/C7 - Unauthenticated LAN Remote Code Execution (Metasploit)
remote linux_mips 20002 CVE-2020-10884;CVE-2020-10883;CVE-2020-10882

Metasploit SharePoint Workflows - XOML Injection (Metasploit)
remote windows CVE-2020-0646

Metasploit DLINK DWL-2600 - Authenticated Remote Command Injection (Metasploit)
remote hardware CVE-2019-20499

Metasploit IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)
remote multiple CVE-2019-4716

Metasploit Redis - Replication Code Execution (Metasploit)
remote linux

0xsha Multiple DrayTek Products - Pre-authentication Remote Root Code Execution
remote linux CVE-2020-8515

LAHBAL Said CyberArk PSMP 10.9.1 - Policy Restriction Bypass
remote multiple

Maurizio S Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
remote multiple CVE-2019-15126

Metasploit ManageEngine Desktop Central - Java Deserialization (Metasploit)
remote multiple CVE-2020-10189

Metasploit Rconfig 3.x - Chained Remote Code Execution (Metasploit)
remote linux CVE-2020-10220;CVE-2019-19509

Ian Sindermann Drobo 5N2 4.1.1 - Remote Command Injection
remote hardware