Robert Larsen CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass)
local windows OSVDB-85082

rgod AOL Products downloadUpdater2 Plugin - 'SRC' Remote Code Execution
dos windows OSVDB-84493

Ucha Gobejishvili Mibew Messenger 1.6.4 - 'threadid' SQL Injection
webapps php

Gjoko Krstic PolarisCMS - 'WebForm_OnSubmit()' Cross-Site Scripting
webapps asp

Chris Kellum WordPress Plugin Effective Lead Management 3.0.0 - Persistent Cross-Site Scripting
webapps php OSVDB-84462

chap0 Tickets CAD 2.20G - Multiple Vulnerabilities
webapps php OSVDB-85130;OSVDB-85129;OSVDB-85128;OSVDB-85127

pole CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2)
local windows OSVDB-85082

s3n4t00r Islamnt Islam Forum Script 1.2 - Blind SQL Injection
webapps php OSVDB-84461

L0n3ly-H34rT Wiki Web Help - 'configpath' Remote File Inclusion
webapps php

Lorenzo Cantoni Open Constructor - 'confirm.php?q' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88831

Lorenzo Cantoni Open Constructor - '/data/file/edit.php?result' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88832

Lorenzo Cantoni Open Constructor - '/users/users.php?keyword' Cross-Site Scripting
webapps php CVE-2012-3872;OSVDB-88835

PuN!Sh3r Elefant CMS - 'id' Cross-Site Scripting
webapps php

Marcos Garcia ntop - 'arbfile' Cross-Site Scripting
webapps multiple

Shaun Colley FreeBSD - SCTP Remote NULL Ptr Dereference Denial of Service
dos freebsd OSVDB-84689;CVE-2012-3549

Metasploit Zenoss 3 - showDaemonXMLConfig Command Execution (Metasploit)
remote unix 8080 OSVDB-84408