Metasploit WordPress Plugin WP-Property - Arbitrary '.PHP' File Upload (Metasploit)
remote php OSVDB-82656

Metasploit IBM Lotus Notes Client URL Handler - Command Injection (Metasploit)
remote windows CVE-2012-2174;OSVDB-83063

Metasploit Microsoft SQL Server - Database Link Crawling Command Execution (Metasploit)
remote windows

Rafay Baloch cPanel - 'account' Cross-Site Scripting
webapps php OSVDB-88749

Stefan Schurtz Hero Framework - users/login 'Username' Cross-Site Scripting
webapps php OSVDB-88731

Stefan Schurtz Hero Framework - 'search?q' Cross-Site Scripting
webapps php OSVDB-88732

Red_Hat MyBB AwayList Plugin - 'index.php?id' SQL Injection
webapps php OSVDB-88734

JoinSe7en MyBB HM My Country Flags - SQL Injection
webapps php OSVDB-88757

3spi0n City Directory Review and Rating Script - 'search.php' SQL Injection
webapps php OSVDB-88735

Hamza Megahed Linux/x86 - Remote Port Forwarding (ssh -R 9999:localhost:22 192.168.0.226) Shellcode (87 bytes)
linux_x86 87

Metasploit Netwin SurgeFTP - Remote Command Execution (Metasploit)
remote multiple OSVDB-89105

Metasploit Foswiki MAKETEXT - Remote Command Execution (Metasploit)
remote unix CVE-2012-6330;OSVDB-88410;CVE-2012-6329

Metasploit TWiki MAKETEXT - Remote Command Execution (Metasploit)
remote unix CVE-2012-6329;OSVDB-88460;OSVDB-88272

3spi0n City Reviewer - 'search.php' Script SQL Injection
webapps php

Metasploit Google Android 4.2 Browser and WebView - 'addJavascriptInterface' Code Execution (Metasploit)
local android CVE-2012-6636;CVE-2013-4710;OSVDB-97520

i-Hmx VoipNow Service Provider Edition - Arbitrary Command Execution
webapps php