hack4love MP3 Studio 1.0 - '.mpf' / '.m3u' Local Stack Overflow (PoC)
dos windows OSVDB-56574

sm0k3 Joomla! Component IXXO Cart! Standalone and - SQL Injection
webapps php OSVDB-56589;CVE-2009-3215;OSVDB-56588

Qabandi Allomani Movies & Clips 2.7.0 - Blind SQL Injection
webapps php OSVDB-63092;CVE-2009-4734

Qabandi Allomani Songs & Clips 2.7.0 - Blind SQL Injection
webapps php OSVDB-63091;CVE-2009-4735

Qabandi Allomani Mobile 2.5 - Blind SQL Injection
webapps php OSVDB-58388;CVE-2009-3430

Dr_IDE Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation
local windows

boom3rang Inout Adserver - 'id' SQL Injection
webapps php OSVDB-56560;CVE-2009-3223

MizoZ Super Mod System 3.0 - 's' SQL Injection
webapps php OSVDB-56562;CVE-2009-3224

int_main(); PHP Paid 4 Mail Script - 'home.php' Remote File Inclusion
webapps php OSVDB-56573;CVE-2009-2773

Christoph Bott Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)
dos hardware

octopos VS PANEL 7.5.5 - 'Cat_ID' SQL Injection
webapps php

SirGod iwiccle 1.01 - Local File Inclusion / SQL Injection
webapps php OSVDB-58218;CVE-2009-3217;OSVDB-56563;CVE-2009-3216

Jon Oberheide ISC DHCP dhclient < 3.1.2p1 - Remote Buffer Overflow (PoC)
dos linux CVE-2009-0692;OSVDB-55819

sqlevil stftp 1.10 - PWD Response Remote Stack Overflow (PoC)
dos linux OSVDB-56189

Chip d3 bi0s URA 3.0 - 'cat' SQL Injection
webapps php OSVDB-56572;CVE-2009-2895

Moudi garagesalesjunkie - SQL Injection / Cross-Site Scripting
webapps php OSVDB-57129;CVE-2009-2778;OSVDB-56578;CVE-2009-2777