boom3rang Mambo Component n-form - 'form_id' Blind SQL Injection
webapps php

Stack V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling
webapps php OSVDB-49675;CVE-2008-5784;CVE-2008-5783

ZoRLu Zeeways ZeeJobsite 2.0 - Arbitrary File Upload
webapps php OSVDB-56889;CVE-2008-6913

d3b4g V3 Chat Profiles/Dating Script 3.0.2 - Authentication Bypass
webapps php OSVDB-51101;CVE-2008-5785

hkm 2WIRE DSL Router - 'xslt' Denial of Service
dos hardware OSVDB-60243;CVE-2008-6605;OSVDB-49835

BugReport.IR Enthusiast 3.1.4 - 'show_joined.php' Remote File Inclusion
webapps php OSVDB-49676;CVE-2008-5792

ZoRLu zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting
webapps php OSVDB-56891;CVE-2008-6915;OSVDB-56890;CVE-2008-6914

Ams MemHT Portal 4.0 - Remote Code Execution
webapps php OSVDB-49820

Kevin Finisterre GE Proficy Real Time Information Portal - Credentials Leak Sniffer (Metasploit)
remote windows

alex Anti-Trojan Elite 4.2.1 - 'Atepmon.sys' IOCTL Request Local Overflow / Local Privilege Escalation
local windows CVE-2008-5048;OSVDB-49862

G4N0K TurnkeyForms Software Directory 1.0 - SQL Injection / Cross-Site Scripting
webapps php OSVDB-49751;OSVDB-49750

hkm SpeedStream 5200 - Authentication Bypass Configuration Download
remote hardware OSVDB-49870;CVE-2008-6916

NT Internals Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation
local windows OSVDB-49861;CVE-2008-5049

G4N0K Myiosoft EasyBookMarker 4 - 'Parent' SQL Injection
webapps php OSVDB-49690;CVE-2008-5655;CVE-2008-5651

TR-ShaRk Domain Seller Pro 1.5 - 'id' SQL Injection
webapps php OSVDB-49691;CVE-2008-5788

SkD VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow
local windows CVE-2008-5036