darkmasking Fotoshow PRO - 'category' SQL Injection
webapps php OSVDB-57392

jdc Joomla! Component MisterEstate - Blind SQL Injection
webapps php OSVDB-57179

SwEET-DeViL Infinity 2.x - 'options[style_dir]' Local File Disclosure
webapps php CVE-2009-3211;OSVDB-58239

Red-D3v1L E CMS 1.0 - 'index.php?s' SQL Injection
webapps php

cr4wl3r autonomous lan party 0.98.3 - Remote File Inclusion
webapps php OSVDB-57180

bugz 2WIRE Gateway - Authentication Bypass / Password Reset (2)
webapps php OSVDB-97302

hack4love Xenorate Media Player 2.6.0.0 - '.xpl' Universal Local Buffer (SEH)
local windows OSVDB-57162

hack4love broid 1.0 Beta 3a - '.mp3' Local Buffer Overflow (PoC)
dos windows CVE-2009-3213;OSVDB-58219

SuNHouSe2 ZTE ZXDSL 831 II Modem - Arbitrary Add Admin
remote hardware OSVDB-57419

Irfan Asrar Microsoft Internet Explorer - JavaScript SetAttribute Remote Crash
dos windows OSVDB-57654;CVE-2009-3019

Leon Juranic Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)
dos multiple

Mr.SQL Videos Broadcast Yourself 2 - 'UploadID' SQL Injection
webapps php OSVDB-57227;CVE-2009-2924

Mr.SQL Arcadem Pro 2.8 - 'article' Blind SQL Injection
webapps php OSVDB-57170

Mr.SQL DreamPics Builder - 'exhibition_id' SQL Injection
webapps php

USH vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross-Site Scripting
webapps php OSVDB-58269;CVE-2009-3250;OSVDB-58268;CVE-2009-3249;OSVDB-58267;CVE-2009-3248;OSVDB-57240;CVE-2009-3247;OSVDB-57239;OSVDB-57238;OSVDB-57237

Evilcry TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service
dos windows CVE-2009-2918;OSVDB-57139