Claudio Viviani WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection
webapps php 80 OSVDB-110683;CVE-2014-7153

Hans-Martin Muench ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)
webapps jsp 8400 OSVDB-110645;OSVDB-110642;CVE-2014-6043;CVE-2014-6037

Jesus Ramirez Pichardo WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload
webapps php 80 CVE-2014-5460;OSVDB-110647

Hugo Santiago Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
webapps php 80 OSVDB-109645;CVE-2015-1579;CVE-2014-9734

Benjamin Harris XRms - Blind SQL Injection / Command Execution
webapps php 80 OSVDB-110533;OSVDB-110532;CVE-2014-5521;CVE-2014-5520

Benjamin Harris PhpWiki - Remote Command Execution
webapps php 80 OSVDB-110576;CVE-2014-5519

Benjamin Harris ActualAnalyzer Lite 2.81 - Command Execution
webapps php 80 OSVDB-110601

b0z Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload
webapps php 80 CVE-2014-2223;OSVDB-103853

José Tozo VTLS Virtua InfoStation.cgi - SQL Injection
webapps cgi 80 CVE-2014-2081;OSVDB-110436

Pedro Ribeiro ManageEngine Password Manager - MetadataServlet.dat SQL Injection (Metasploit)
webapps multiple 8020 CVE-2014-3996;OSVDB-110198

Rainer Giedat Innovaphone PBX Admin-GUI - Cross-Site Request Forgery
webapps multiple 80 CVE-2014-5335;OSVDB-110269

Metasploit HybridAuth - 'install.php' PHP Code Execution (Metasploit)
remote php 80 OSVDB-109838

zixian Tenda A5s Router 3.02.05_CN - Authentication Bypass
webapps hardware 80 CVE-2014-5246;OSVDB-110146

Nik Cubrilovic WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) / Cross-Site Scripting
webapps php 80 OSVDB-109988;OSVDB-109987;OSVDB-108780;CVE-2014-5347;CVE-2014-5346;CVE-2014-5345

Metasploit VMTurbo Operations Manager 4.6 - 'vmtadmin.cgi' Remote Command Execution (Metasploit)
remote linux 80 CVE-2014-5073;OSVDB-109572

Breaking.Technology TomatoCart 1.x - SQL Injection
webapps php 80 CVE-2014-3978;OSVDB-109912