>> ARCHIVE: 2019-08

Ghidra (Linux) 9.0.4 – .gar Arbitrary Code Execution

Webmin 1.920 – Unauthenticated Remote Code Execution (Metasploit)

ManageEngine OpManager 12.4x – Unauthenticated Remote Command Execution (Metasploit)

ManageEngine OpManager 12.4x – Privilege Escalation / Remote Command Execution (Metasploit)

ManageEngine Application Manager 14.2 – Privilege Escalation / Remote Command Execution (Metasploit)

osTicket 1.12 – Formula Injection

osTicket 1.12 – Persistent Cross-Site Scripting

Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticket.php’ Arbitrary File Deletion

osTicket 1.12 – Persistent Cross-Site Scripting via File Upload

Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticketreply.php’ SQL Injection