Emory University Hannon Hill Cascade Server - (Authenticated) Command Execution
webapps cgi OSVDB-52957;CVE-2009-1088

zAx Chasys Media Player - '.lst Playlist' Local Buffer Overflow
local windows OSVDB-52846

Jonathan Salwan SW-HTTPD Server 0.x - Remote Denial of Service
dos multiple

Fireshot Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass )
webapps php OSVDB-52839;CVE-2009-1049

Fireshot Bloginator 1a - Cookie Bypass / SQL Injection
webapps php OSVDB-52839;CVE-2009-1050;OSVDB-52838;CVE-2009-1049

Stack Chasys Media Player 1.1 - '.cue' Local Stack Overflow
local windows

Juan Galiana Lara ModSecurity < 2.5.9 - Remote Denial of Service
dos multiple OSVDB-52553;CVE-2009-1902

girex DeluxeBB 1.3 - 'qorder' SQL Injection
webapps php OSVDB-52788;CVE-2010-4151;CVE-2009-1033

Alfons Luja Pivot 1.40.6 - Arbitrary File Deletion
webapps php OSVDB-52772

boom3rang Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection
webapps php OSVDB-52813;CVE-2009-1032

any.zicky Facil-CMS 0.1RC2 - Multiple Vulnerabilities
webapps php

His0k4 Icarus 2.0 - '.pgn' Local Stack Overflow (SEH)
local windows OSVDB-52780;CVE-2009-1071

Encrypt3d.M!nd Chasys Media Player 1.1 - '.m3u' Local Stack Overflow
local windows

Encrypt3d.M!nd Chasys Media Player 1.1 - '.pls' Local Stack Overflow (2)
local windows

His0k4 Chasys Media Player 1.1 - '.pls' Local Stack Overflow
local windows

zAx Chasys Media Player 1.1 - '.pls' Local Buffer Overflow (PoC) (SEH)
dos windows OSVDB-52846