ninjashell cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)
webapps php

Alexey Sintsov Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Without EggHunter) (Metasploit)
local windows OSVDB-72455

boahat Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute
remote windows

takeshix HB eCommerce - SQL Injection
webapps php

Francesco Tornieri Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration
remote linux

Alexey Sintsov Windows - Download File + Execute Via DNS + IPv6 Shellcode (Generator) (Metasploit)
generator

AutoSec Tools Clipbucket 2.4 RC2 645 - SQL Injection
webapps php OSVDB-72497

Matt Jezorek BlackBoard Learn 8.0 - 'keywordraw' Cross-Site Scripting
webapps cgi

Spare Clock Cycles RXS-3211 IP Camera - UDP Packet Password Information Disclosure
remote hardware

Brian W. Gary Vordel Gateway 6.0.3 - Directory Traversal
remote linux

AutoSec Tools Kryn.cms 0.9 - '_kurl' Cross-Site Scripting
webapps php

ThunDEr HeaD Joomla! Component com_shop - SQL Injection
webapps php OSVDB-83195

KedAns-Dz MidiCMS Website Builder - Local File Inclusion / Arbitrary File Upload
webapps php

Metasploit AWStats Totals 1.14 multisort - Remote Command Execution (Metasploit)
webapps php CVE-2008-3922;OSVDB-47807

RubberDuck Windows - Add Administrator User (RubberDuck/mudbath) + ExitProcess WinExec Shellcode (279 bytes)
windows 279

AutoSec Tools eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities
webapps php