ThE g0bL!N BlazeDVD 5.1/HDTV Player 6.0 - '.plf' Universal Buffer Overflow (SEH)
local windows CVE-2009-0450;OSVDB-51825;CVE-2006-6199;OSVDB-30770

hack4love jetAudio 7.1.9.4030 plus vx - '.m3u' Local Buffer Overflow (PoC)
dos windows

Angela Chang In-portal 4.3.1 - 'index.php?env' Local File Inclusion
webapps php OSVDB-56801;CVE-2009-4986

Shadow Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
webapps cgi

PLATEN ShopMaker CMS 2.0 - Blind SQL Injection / Local File Inclusion
webapps php

eLwaux elgg 1.5 - '/_css/js.php' Local File Inclusion
webapps php OSVDB-56760;CVE-2009-3149

germaya_x Mediacoder 0.7.1.4486 - '.lst' Universal Buffer Overflow (SEH)
local windows

SirGod MOC Designs PHP News 1.1 - Authentication Bypass
webapps php OSVDB-57249;CVE-2009-2921

Jon Oberheide Linux Kernel 2.6.31-rc5 - sigaltstack 4-Byte Stack Disclosure
local linux OSVDB-57208;CVE-2009-2847

Drosophila Blog Ink (Blink) - Multiple SQL Injections
webapps php

MizoZ Payment Processor Script (PPScript) - 'shop.htm' SQL Injection
webapps php CVE-2009-4724;OSVDB-56728

Melissa Elliott PHP Fuzzer Framework - Default Location Insecure Temporary File Creation
local linux

ZoRLu Payment Processor Script (PPScript) - 'shop.htm cid' SQL Injection
webapps php OSVDB-56728;CVE-2009-4724

GoLd_M MAXcms 3.11.20b - Remote File Inclusion / File Disclosure
webapps php OSVDB-57103;CVE-2009-3426;OSVDB-57102;CVE-2009-3425

Salvatore Fresta Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection
webapps php OSVDB-62024;CVE-2009-4719

Salvatore Fresta Blink Blog System - Authentication Bypass
webapps php OSVDB-61998;OSVDB-61997