Marco Ivaldi Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)
local linux CVE-2006-2451

xzerox FLV Players 8 - 'popup.php?url' Cross-Site Scripting
remote multiple CVE-2006-3624;OSVDB-28644

xzerox FLV Players 8 - 'player.php?url' Cross-Site Scripting
remote multiple CVE-2006-3624;OSVDB-28643

omnipresent Fantastic Guestbook 2.0.1 - 'Guestbook.php' HTML Injection
webapps php CVE-2006-3568;OSVDB-27107

dreyer & RoMaNSoFt Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)
local linux CVE-2006-2451

Paisterist Graffiti Forums 1.0 - 'Topics.php' SQL Injection
webapps php CVE-2006-3560;OSVDB-27133

armin390 Farsinews 3.0 - 'Tiny_mce_gzip.php' Directory Traversal
webapps php CVE-2006-3602;OSVDB-28598

Jacek Wlodarczyk Ottoman CMS 1.1.3 - '?default_path=' Remote File Inclusion (2)
webapps php

joffer Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
remote multiple 10000 OSVDB-26772;CVE-2006-3392

A.nosrati Sabdrimer PRO 2.2.4 - 'pluginpath' Remote File Inclusion
webapps php OSVDB-30932;CVE-2006-3520

StorMBoY RW::Download - 'stats.php' Remote File Inclusion
webapps php CVE-2006-3517;OSVDB-28185

StorMBoY Webvizyon - 'SayfalaAltList.asp' SQL Injection
webapps asp CVE-2006-3518;OSVDB-28192

securityconnection ATutor 1.5.3 - Multiple Input Validation Vulnerabilities
webapps php CVE-2006-3662;OSVDB-28188

rgod PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure
webapps php OSVDB-27118;CVE-2006-3572;OSVDB-27117;CVE-2006-3571

Jerome Athias WinRAR 3.60 Beta 6 (French) - SFX Path Local Stack Overflow
local windows OSVDB-27031;CVE-2006-3912

rgod Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
webapps php OSVDB-27512;CVE-2006-3533;OSVDB-27129;CVE-2006-3532;OSVDB-27128;OSVDB-27127;OSVDB-27126;CVE-2006-3531