Corwin irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection
webapps php

DATA_SNIPER Hex Workshop 6.0 - '.hex' Local Code Execution
local windows OSVDB-52352;CVE-2009-0812

JavaGuru Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow
remote windows OSVDB-52294;CVE-2009-0187

Jeremy Brown POP Peeper 3.4.0.0 - UIDL Remote Buffer Overflow (SEH)
remote windows OSVDB-53559

Digital Security Research Group APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting
webapps java OSVDB-52503

Andreas Jellinghaus OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access
local linux CVE-2009-0368;OSVDB-52827

Cru3l.b0y Parsi PHP CMS 2.0 - 'index.php' SQL Injection
webapps php OSVDB-106959

rootzig BannerManager 0.81 - Authentication Bypass
webapps php

StAkeR Coppermine Photo Gallery 1.4.20 - BBCode IMG Privilege Escalation
webapps php OSVDB-52293

CrazyAngel Golabi CMS 1.0 - Remote File Inclusion
webapps php OSVDB-52831

Digital Security Research Group JOnAS 4.10.3 - 'select' Error Page Cross-Site Scripting
webapps java OSVDB-52380

Trancer Apple Safari 4 - 'feeds:' URI Null Pointer Dereference Remote Denial of Service
dos osx CVE-2009-0744;OSVDB-52898

Cru3l.b0y Orooj CMS - 'news.php' SQL Injection
webapps php OSVDB-106960

Chris Evans Linux Kernel 2.6.x - Cloned Process 'CLONE_PARENT' Local Origin Validation
dos linux CVE-2009-0028;OSVDB-52204

patrick ContentKeeper Web Appliance < 125.10 - Command Execution (Metasploit)
webapps multiple OSVDB-54551

staticrez Netgear WGR614v9 Wireless Router - Denial of Service
dos hardware