Francis Provencher Novell Client for Windows 2000/XP - ActiveX Remote Denial of Service
dos windows

Francis Provencher Cerberus FTP 3.0.1 - 'ALLO' Remote Overflow Denial of Service (Metasploit)
dos windows OSVDB-57398

Henri Lindberg Xerox WorkCentre (Multiple Models) - Denial of Service
dos hardware OSVDB-57339

Jon Oberheide Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure
local linux OSVDB-57427;CVE-2009-3001

Securitylab.ir TCPDB 3.8 - Remote Content Change Bypass
webapps php

Red-D3v1L Turnkey Arcade Script - SQL Injection (2)
webapps php OSVDB-50315;CVE-2009-3973;CVE-2008-5629

v3n0m Joomla! Component com_siirler 1.2 - 'sid' SQL Injection
webapps php OSVDB-60421;CVE-2009-3972

hack4love Media Jukebox 8 - '.m3u' Universal Local Buffer (SEH)
local windows

His0k4 ProFTP 2.9 - Welcome Message Remote Buffer Overflow (Metasploit)
remote windows OSVDB-57394;CVE-2009-3976

Francesco Bianchino Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting
webapps php CVE-2009-2965;OSVDB-57369

the_Edit0r AiO (All into One) Flash Mixer 3 - '.afp' Crash (PoC)
dos windows OSVDB-62596

the_Edit0r FLIP Flash Album Deluxe 1.8.407.1 - '.fft' Crash (PoC)
dos windows OSVDB-62597

JaL0h Geeklog 1.6.0sr1 - Arbitrary File Upload
webapps php OSVDB-57476

Chip d3 bi0s Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection
webapps php OSVDB-60420;CVE-2009-3971

Jerome Athias Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities
remote hardware OSVDB-56875

Chip d3 bi0s Joomla! Component com_ninjamonial 1.1 - 'testimID' SQL Injection
webapps php OSVDB-60417;CVE-2009-3964