MF0x WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download
webapps php OSVDB-110463

Samandeep Singh Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities
remote ios OSVDB-110474;OSVDB-110446;OSVDB-110445

GulfTech Security LiveWorld Multiple Products - Cross Site Scripting
webapps asp CVE-2004-2566;GTSA-00042

Vagineer MyAwards MyBB Module - Cross-Site Request Forgery
webapps php OSVDB-110438

Metasploit HybridAuth - 'install.php' PHP Code Execution (Metasploit)
remote php 80 OSVDB-109838

DemoLisH B3yaZ MyBB 1.8 Beta 3 - Multiple Vulnerabilities
webapps php OSVDB-110227;OSVDB-110226;OSVDB-110225;OSVDB-110224;OSVDB-110223;OSVDB-110222

High-Tech Bridge ArticleFR - 'id' SQL Injection
webapps php CVE-2014-5097;OSVDB-109504

Pedro Ribeiro ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
webapps multiple CVE-2014-3997;OSVDB-110199

metacom BlazeDVD Pro Player 7.0 - '.plf' Local Buffer Overflow (SEH)
local windows OSVDB-105679

Henri Salo WordPress Plugin WP Content Source Control - 'download.php' Directory Traversal
webapps php CVE-2014-5368;OSVDB-110194

Metasploit Mozilla Firefox - toString console.time Privileged JavaScript Injection (Metasploit)
remote multiple CVE-2013-1670;OSVDB-93427

Metasploit Gitlab-shell - Code Execution (Metasploit)
remote linux 443 CVE-2013-4490;OSVDB-99371

zixian Tenda A5s Router 3.02.05_CN - Authentication Bypass
webapps hardware 80 CVE-2014-5246;OSVDB-110146

James Fitts Alienvault Open Source SIEM (OSSIM) < 4.7.0 - 'get_license' Remote Command Execution (Metasploit)
remote linux CVE-2014-5210

Nik Cubrilovic WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) / Cross-Site Scripting
webapps php 80 OSVDB-109988;OSVDB-109987;OSVDB-108780;CVE-2014-5347;CVE-2014-5346;CVE-2014-5345

Metasploit VMTurbo Operations Manager 4.6 - 'vmtadmin.cgi' Remote Command Execution (Metasploit)
remote linux 80 CVE-2014-5073;OSVDB-109572