Yann CAM pfSense 2.0.1 - Cross-Site Scripting / Cross-Site Request Forgery / Remote Command Execution
webapps php OSVDB-88930;OSVDB-88929;OSVDB-88928

Aung Khant TomatoCart - 'json.php' Security Bypass
webapps php OSVDB-88917

JingoBD Multiple WordPress WPScientist Themes - Arbitrary File Upload
webapps php

Ichi MyBB Profile Wii Friend Code - Multiple Vulnerabilities
webapps php OSVDB-88912;OSVDB-88911

Metasploit Enterasys NetSight - 'nssyslogd.exe' Remote Buffer Overflow (Metasploit)
remote windows CVE-2011-5227;OSVDB-77971

CwG GeNiuS Simple Web Server 2.3-rc1 - Directory Traversal
webapps windows OSVDB-88877

ZhaoChunsheng Belkin Wireless Router - Default WPS PIN Security
remote hardware CVE-2012-4366;OSVDB-87617

Sammy FORGIT WordPress Plugin Uploader - Arbitrary File Upload
webapps php OSVDB-88918

Metasploit WordPress Plugin Advanced Custom Fields - Remote File Inclusion (Metasploit)
remote php OSVDB-87353

Metasploit WordPress Plugin Advanced Custom Fields - Remote File Inclusion (Metasploit)
remote php OSVDB-87353

dun Allied Telesis AT-MCF2000M 3.0.2 - Remote Command Execution
remote hardware OSVDB-88921

AkaStep osTicket - 'tickets.php?status' Cross-Site Scripting
webapps php OSVDB-88950

AkaStep osTicket - 'l.php?url' Arbitrary Site Redirect
webapps php OSVDB-88951

Sammy FORGIT WordPress Plugin Xerte Online - 'save.php' Arbitrary File Upload
webapps php OSVDB-88822

xistence Astium VoIP PBX 2.1 build 25399 - Multiple Vulnerabilities/Remote Command Execution
webapps php OSVDB-88860;OSVDB-88859

xistence Astium VoIP PBX 2.1 build 25399 - Remote Crash (PoC)
dos linux 5655 OSVDB-88861