Crim3R XM Forum - 'search.asp' SQL Injection
webapps asp

HauntIT TomatoCart - 'example_form.ajax.php' Cross-Site Scripting
webapps php

Stefan Bauer SquidGuard 1.4 - Long URL Handling Remote Denial of Service
dos xml

Metasploit Symantec Messaging Gateway 9.5/9.5.1 - SSH Default Password Security Bypass (Metasploit)
remote linux CVE-2012-3579;OSVDB-85028

DaOne Booking System Pro - Cross-Site Request Forgery
webapps php OSVDB-85075

Metasploit HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow (Metasploit)
local windows CVE-2012-3274;OSVDB-85060

High-Tech Bridge PrestaShop 1.4.7 - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2012-2517;OSVDB-85011

High-Tech Bridge Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2012-4234;OSVDB-85022

MustLive JW Player - 'logo.link' Cross-Site Scripting
webapps php

JoinSe7en WordPress Plugin HD Webplayer 1.1 - SQL Injection
webapps php OSVDB-85064;OSVDB-85063

Ciph3r Winlog Lite SCADA HMI system - Overwrite (SEH)
dos windows OSVDB-86615

Craig Freyman ActFax Server 4.31 Build 0225 - Local Privilege Escalation
local windows OSVDB-85175

Spy_w4r3 Disqus Blog Comments - Blind SQL Injection
webapps php OSVDB-85935

Iranian Dark Coders WordPress Plugin Simple:Press Forum - Arbitrary File Upload
webapps php

Jan Van Niekerk WordPress Plugin Cloudsafe365 - 'file' Remote File Disclosure
webapps php

Mattijs van Ommeren Conceptronic Grab'n'Go and Sitecom Storage Center - Password Disclosure
webapps hardware OSVDB-84977;OSVDB-84976