Cesar Neira TVT TD-2308SS-B DVR - Directory Traversal
webapps hardware CVE-2013-6023

Jje Incovers Multiple WordPress Orange Themes - Cross-Site Request Forgery (Arbitrary File Upload)
webapps php

BlackDream MyBB 1.6.11 - Remote Code Execution
webapps php

Akin Tosunlar Audacious Player 3.4.2/3.4.1 - '.mp3' Crash (PoC)
dos windows

Julien Ahrens Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Local Buffer Overflow (SEH)
local windows CVE-2013-3934

Ariel Orellana Zend-Framework - Full Information Disclosure
webapps php OSVDB-100626

LiquidWorm Ametys CMS 3.5.2 - 'lang' XPath Injection
webapps java OSVDB-100486

GalaxyAndroid Static HTTP Server 1.0 - Denial of Service
dos windows OSVDB-94717

IeDb ir MyBB Ajaxfs 2 Plugin - SQL Injection
webapps php CVE-2013-6936;OSVDB-100030

Haider Mahmood WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery
webapps php CVE-2013-6797;OSVDB-98922

Akin Tosunlar Boilsoft RM TO MP3 Converter 1.72 - '.wav' Crash (PoC)
dos windows OSVDB-100428

LiquidWorm LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities
webapps php OSVDB-100430;OSVDB-100429

Eduardo Gonzalez Thomson Reuters Velocity Analytics - Remote Code Injection
remote hardware CVE-2013-5912;OSVDB-100273

DevilScreaM WordPress Theme Suco - 'themify-ajax.php' Arbitrary File Upload
webapps php OSVDB-100271

Ruben Garrote García PineApp MailSecure - Remote Command Execution
remote linux 7443 CVE-2013-6831;CVE-2013-6830;CVE-2013-6829;OSVDB-100094;OSVDB-100029

Ivan Fratric Nginx 1.1.17 - URI Processing SecURIty Bypass
remote multiple CVE-2013-4547;OSVDB-100015