RedTeam Pentesting Python CGIHTTPServer - Encoded Directory Traversal
webapps multiple CVE-2014-4650;OSVDB-108369

Metasploit Microsoft Registry Symlink - IE Sandbox Escape (MS13-097) (Metasploit)
local windows CVE-2013-5045;OSVDB-100757;MS13-097

Metasploit Microsoft .NET Deployment Service - IE Sandbox Escape (MS14-009) (Metasploit)
local windows CVE-2014-0257;OSVDB-103163;MS14-009

Metasploit HP AutoPass License Server - Arbitrary File Upload (Metasploit)
remote java 5814 CVE-2013-6221;OSVDB-107943

Onur Alanbel (BGA) Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities
webapps cgi OSVDB-108443;OSVDB-108442;OSVDB-108441;OSVDB-108440

Metasploit Cogent DataHub - Command Injection (Metasploit)
remote windows CVE-2014-3789;OSVDB-107097

LiquidWorm Lunar CMS 3.3 - Remote Command Execution
webapps php OSVDB-108307

nopesled Thomson TWG87OUIR - POST Password Cross-Site Request Forgery
webapps hardware OSVDB-108397;CVE-2014-4716

Kenny Mathis ZeusCart - 'prodid' SQL Injection
webapps php CVE-2014-3868;OSVDB-108378

Metasploit Alienvault Open Source SIEM (OSSIM) - av-centerd Command Injection (Metasploit)
remote linux 40007 CVE-2014-3804;OSVDB-108007;OSVDB-108006;OSVDB-108005;OSVDB-108004;OSVDB-107991;OSVDB-106816

Metasploit D-Link Devices - 'hedwig.cgi' Remote Buffer Overflow in Cookie Header (Metasploit)
remote hardware 80 OSVDB-95950

Metasploit D-Link Devices - 'Authentication.cgi' Remote Buffer Overflow (Metasploit)
remote hardware 80 OSVDB-95951

Drozdova Liudmila Microsoft Internet Explorer 8/9/10 - 'CInput' Use-After-Free Crash (PoC) (MS14-035)
dos windows CVE-2014-0282;OSVDB-107851;MS14-035

@u0x Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code Execution
webapps php CVE-2014-4663;OSVDB-108398

Filippos Mastrogiannis ZeroCMS 1.0 - 'zero_transact_article.php' SQL Injection
webapps php CVE-2014-4194;OSVDB-108295

LiquidWorm Lunar CMS 3.3 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
webapps php OSVDB-108351;OSVDB-108350;CVE-2014-4718