Metasploit Zimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)
remote linux 8443 CVE-2019-9670;CVE-2019-9621

Metasploit Zimbra Collaboration - Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)
remote linux 8443 CVE-2019-9670;CVE-2019-9621

Metasploit Microsoft Windows - Contact File Format Arbitary Code Execution (Metasploit)
local windows

Metasploit Microsoft Windows - Contact File Format Arbitary Code Execution (Metasploit)
local windows

AkkuS ATutor < 2.2.4 - 'file_manager' Remote Code Execution (Metasploit)
webapps php CVE-2019-11446

hyp3rlinx Microsoft Internet Explorer 11 - XML External Entity Injection
local windows

Alpcan Onaran CyberArk EPM 10.2.1.603 - Security Restrictions Bypass
local windows CVE-2018-14894

Semen Alexandrovich Lyhin D-Link DI-524 V2.06RU - Multiple Cross-Site Scripting
webapps hardware 80 CVE-2019-11017

Dino Covotsos FTPShell Server 6.83 - 'Virtual Path Mapping' Local Buffer
local windows

Dino Covotsos FTPShell Server 6.83 - 'Virtual Path Mapping' Local Buffer
local windows

Dino Covotsos FTPShell Server 6.83 - 'Account name to ban' Local Buffer
local windows

Dino Covotsos FTPShell Server 6.83 - 'Account name to ban' Local Buffer
local windows

Julien Ahrens Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Unauthenticated Remote Code Execution
webapps php 443

Nabeel Ahmed Microsoft Windows - AppX Deployment Service Privilege Escalation
local windows CVE-2019-0841

David Yesland Apache Axis 1.4 - Remote Code Execution
remote multiple CVE-2019-0227

Doğukan Karaciğer Ashop Shopping Cart Software - 'bannedcustomers.php?blacklistitemid' SQL Injection
webapps php 80