Caddy-Dz Mambo 4.6.5 - 'index.php' Cross-Site Request Forgery
webapps php

Aung Khant Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)
webapps php OSVDB-75481

Canberk BOLAT Sunway Force Control SCADA 6.1 SP3 - 'httpsrv.exe' Remote Overflow
remote windows

evilsocket WordPress Plugin Photoracer 1.0 - SQL Injection
webapps php

Metasploit RealVNC - Authentication Bypass (Metasploit)
remote windows CVE-2006-2369;OSVDB-25479

D3r K0n!G Groovy Media Player 2.6.0 - '.m3u' Local Buffer Overflow (PoC)
dos windows

Christian Yerena Simple Machines Forum (SMF) 1.1.14/2.0 - '[img]' BBCode Tag Cross-Site Request Forgery
webapps php

KedAns-Dz Zazavi 1.2.1 - '/FileManager/Controller.php' Arbitrary File Upload
webapps php

evilsocket WordPress Plugin SendIt 1.5.9 - Blind SQL Injection
webapps php

Eyup CELIK VicBlog - 'tag' SQL Injection
webapps php

Eyup CELIK Tourismscripts Hotel Portal - 'hotel_city' HTML Injection
webapps php

Eyup CELIK CommodityRentals Real Estate Script - 'txtsearch' HTML Injection
webapps php

41.w4r10r F-Secure (Multiple Products) - ActiveX HeapSpray Overwrite (SEH)
local windows

G13 Help Desk Software 1.1g - Cross-Site Request Forgery (Add Admin)
webapps php

Yassin Aboukir Open Classifieds 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

LiquidWorm ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities
webapps jsp OSVDB-74720;OSVDB-74719;OSVDB-74718;OSVDB-74717;OSVDB-74716;OSVDB-74715;OSVDB-74714;OSVDB-74713