LiquidWorm Snowfox CMS 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php 80 OSVDB-114819;CVE-2014-9344

Metasploit Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (2)
remote php 80 CVE-2014-7146;OSVDB-114391

Manuel García Cárdenas Zoph 0.9.1 - Multiple Vulnerabilities
webapps php 80 OSVDB-114782;OSVDB-114781;OSVDB-114780;OSVDB-114779;CVE-2014-9236;CVE-2014-9235

Manuel García Cárdenas WebsiteBaker 2.8.3 - Multiple Vulnerabilities
webapps php 80 OSVDB-114748;OSVDB-114747;OSVDB-114746;OSVDB-114745;OSVDB-114744;OSVDB-114743;OSVDB-114742;OSVDB-114741;CVE-2014-9243;CVE-2014-9242

Project Zero Labs ZTE ZXHN H108L - Authentication Bypass (2)
webapps hardware 80 CVE-2014-8493;OSVDB-114750

BGA Security Proticaret E-Commerce Script 3.0 - SQL Injection (2)
webapps xml 80 OSVDB-114840;CVE-2014-9237

spyk2r PHPFox - Persistent Cross-Site Scripting
webapps php 80 CVE-2014-8469;OSVDB-114841

Timo Schmid Gogs - 'label' SQL Injection
webapps multiple 80 CVE-2014-8681;OSVDB-114644

smash MyBB 1.8.x - Multiple Vulnerabilities
webapps php 80 OSVDB-114675;OSVDB-114610;OSVDB-114609;OSVDB-114608;OSVDB-114607;CVE-2014-9241;CVE-2014-9240

Halil Dalabasmaz Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload
webapps php 80 OSVDB-114604;CVE-2014-8997

Manuel García Cárdenas Piwigo 2.6.0 - 'picture.php?rate' SQL Injection
webapps php 80 OSVDB-114581;CVE-2014-9115

Halil Dalabasmaz WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting
webapps php 80 OSVDB-114602;CVE-2014-9179

Kacper Szurek WordPress Plugin Photo Gallery 1.2.5 - Unrestricted Arbitrary File Upload
webapps php 80 CVE-2014-9312;OSVDB-117676

Larry W. Cashdollar WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
webapps php 80 OSVDB-114181;CVE-2014-8607;CVE-2014-8606;CVE-2014-8605;CVE-2014-8604;CVE-2014-8603;OSVDB-114180;OSVDB-114179;OSVDB-114178;OSVDB-114177;OSVDB-114176

Metasploit Visual Mining NetCharts Server - Remote Code Execution (Metasploit)
remote java 8001 CVE-2014-8516;OSVDB-114127

Breaking.Technology Linux/x64 - execve(_/bin/sh\0__NULL_NULL) + Position Independent + Alphanumeric Shellcode (87 bytes)
linux_x86-64 87