Francesco Tornieri Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration
remote linux

Matt Jezorek BlackBoard Learn 8.0 - 'keywordraw' Cross-Site Scripting
webapps cgi

Spare Clock Cycles RXS-3211 IP Camera - UDP Packet Password Information Disclosure
remote hardware

Brian W. Gary Vordel Gateway 6.0.3 - Directory Traversal
remote linux

ThunDEr HeaD Joomla! Component com_shop - SQL Injection
webapps php OSVDB-83195

RubberDuck Windows - Add Administrator User (RubberDuck/mudbath) + ExitProcess WinExec Shellcode (279 bytes)
windows 279

High-Tech Bridge SA Extcalendar 2.0b2 - 'cal_search.php' SQL Injection
webapps php

Marek Kroemeke PHP 5.3.5 - 'socket_connect()' Local Buffer Overflow
local multiple CVE-2011-1938;OSVDB-72644

Kacper Szczesniak Gadu-Gadu Instant Messenger 6.0 - File Transfer Cross-Site Scripting
remote multiple

High-Tech Bridge SA Ajax Chat 1.0 - 'ajax-chat.php' Cross-Site Scripting
webapps php

High-Tech Bridge SA phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

FL0RiX Joomla! Component Map Locator - 'cid' SQL Injection
webapps php

D4rkB1t vBulletin 4.0.x 4.1.2 - 'search.php' SQL Injection
webapps php OSVDB-112151

LiquidWorm Tugux CMS 1.2 - Multiple Vulnerabilities
webapps php OSVDB-72847;OSVDB-72846;OSVDB-72845;OSVDB-72844

az7rb E-Manage MySchool 7.02 - SQL Injection
webapps php

Sense of Security PHP Captcha / Securimage 2.0.2 - Authentication Bypass
webapps php