Chokri Ben Achor Joomla! Component com_photo - Multiple SQL Injections
webapps php

Benjamin Kunz Mejri Worksforweb iAuto - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
webapps multiple

Metasploit Oracle AutoVue - ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)
remote windows CVE-2012-0549;OSVDB-81439

Robert Larsen CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass)
local windows OSVDB-85082

rgod AOL Products downloadUpdater2 Plugin - 'SRC' Remote Code Execution
dos windows OSVDB-84493

Ucha Gobejishvili Mibew Messenger 1.6.4 - 'threadid' SQL Injection
webapps php

Gjoko Krstic PolarisCMS - 'WebForm_OnSubmit()' Cross-Site Scripting
webapps asp

Chris Kellum WordPress Plugin Effective Lead Management 3.0.0 - Persistent Cross-Site Scripting
webapps php OSVDB-84462

chap0 Tickets CAD 2.20G - Multiple Vulnerabilities
webapps php OSVDB-85130;OSVDB-85129;OSVDB-85128;OSVDB-85127

pole CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2)
local windows OSVDB-85082

s3n4t00r Islamnt Islam Forum Script 1.2 - Blind SQL Injection
webapps php OSVDB-84461

L0n3ly-H34rT Wiki Web Help - 'configpath' Remote File Inclusion
webapps php

Lorenzo Cantoni Open Constructor - 'confirm.php?q' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88831

Lorenzo Cantoni Open Constructor - '/data/file/edit.php?result' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88832

Lorenzo Cantoni Open Constructor - '/users/users.php?keyword' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88835

PuN!Sh3r Elefant CMS - 'id' Cross-Site Scripting
webapps php