Sammy FORGIT Getsimple CMS Items Manager Plugin - 'PHP.php' Arbitrary File Upload
webapps php

Dark-Puzzle Zoom Player - '.avi' Divide-by-Zero Denial of Service
dos windows

Dillon Beresford WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
webapps hardware OSVDB-83636;CVE-2012-4031

Soroush Dalili Microsoft IIS - Short File/Folder Name Disclosure
webapps windows OSVDB-83771

Stephan Knauss WordPress Plugin Backup 2.0.1 - Information Disclosure
webapps php OSVDB-83701

ShadowHatesYou python-wrapper - Untrusted Search Path/Code Execution
local linux OSVDB-83723

kingcope BSD - 'TelnetD' Remote Command Execution (2)
remote bsd OSVDB-84088

Metasploit IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)
local windows CVE-2012-0897;OSVDB-78333

Daniel Godoy Emesene 2.12.5 - Password Disclosure
local linux OSVDB-83766

Metasploit HP Data Protector - Create New Folder Buffer Overflow (Metasploit)
remote windows 3817 CVE-2012-0124;OSVDB-80105

Joseph Sheridan IrfanView JLS Formats PlugIn - Heap Overflow
dos windows CVE-2012-3585;OSVDB-83633

Joseph Sheridan GIMP 2.8.0 - '.FIT' File Format Denial of Service
dos multiple CVE-2012-3236;OSVDB-83634

Chris Kellum WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection
webapps php OSVDB-83768

Nathan Partlan SWFupload - 'movieName' Cross-Site Scripting
webapps multiple CVE-2012-3414;OSVDB-83413

MustLive LIOOSYS CMS - SQL Injection / Information Disclosure
webapps php

Sammy FORGIT JAKCMS PRO 2.2.6 - 'uploader.php' Arbitrary File Upload
webapps php