Piker BLOG 1.55B - 'image_upload.php' Arbitrary File Upload
webapps php OSVDB-50876;CVE-2008-5732

r0ut3r CoolPlayer 2.19 - '.Skin' Local Buffer Overflow
local windows OSVDB-51016;CVE-2008-5735

r0ut3r Linksys WAG54G v2 Wireless ADSL Router - HTTPd Denial of Service
dos hardware OSVDB-53107

Cyber.Zer0 Emefa Guestbook 3.0 - Remote Database Disclosure
webapps asp OSVDB-50880;CVE-2008-5852

NT Internals PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation
local windows OSVDB-50943;CVE-2008-5725

BugReport.IR Chicomas 2.0.4 - Database Backup / File Disclosure / Cross-Site Scripting
webapps php OSVDB-54361;CVE-2008-5853;OSVDB-54360

katharsis Userlocator 3.0 - Blind SQL Injection
webapps php OSVDB-51232;CVE-2008-5863

Moritz Naumann PECL Alternative PHP Cache Local 3 - HTML Injection
webapps php OSVDB-52040

Piker FreeLyrics 1.0 - Remote File Disclosure
webapps php OSVDB-50877;CVE-2008-5861

Osirys myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure
webapps php OSVDB-50887;CVE-2008-5855;OSVDB-50886;CVE-2008-5854

Cold Zero Extract Website - 'Filename' File Disclosure
webapps php OSVDB-50915;CVE-2008-6334

Cold Zero Online Keyword Research Tool - 'download.php' File Disclosure
webapps php OSVDB-50916;CVE-2008-6335

Piker MyPBS - 'seasonID' SQL Injection
webapps php OSVDB-51233;CVE-2008-5851

Jon Oberheide Avahi < 0.6.24 - mDNS Daemon Remote Denial of Service
dos multiple OSVDB-50929;CVE-2008-5081

crash over DO-CMS 3.0 - 'p' Multiple SQL Injections
webapps php CVE-2008-6019;OSVDB-51761

Piker MyPHPsite - Local File Inclusion
webapps php OSVDB-50839;CVE-2008-6018