YEnH4ckEr microTopic 1 - 'Rating' Blind SQL Injection
webapps php OSVDB-61497;CVE-2009-1661;OSVDB-54397

StAkeR openWYSIWYG 1.4.7 - Local Directory Traversal
webapps php OSVDB-54682

StAkeR EggBlog 4.1.1 - Local Directory Traversal
webapps php OSVDB-54682

Cyber-Zone Mereo 1.8.0 - Arbitrary File Disclosure
remote windows

Ahmad Muammar Mozilla Firefox 3.0.x - Large '.GIF' File Background Denial of Service
dos linux CVE-2009-2044;OSVDB-56471

Chris Evans WebKit - XML External Entity Information Disclosure
remote linux CVE-2009-1699;OSVDB-54972

Gerendi Sandor Attila Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting
webapps php CVE-2009-1907;OSVDB-54366

YEnH4ckEr RTWebalbum 1.0.462 - 'albumID' Blind SQL Injection
webapps php OSVDB-54367;CVE-2009-1910

Cyber-Zone Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload
webapps php OSVDB-54374;CVE-2009-1609

LiquidWorm ViPlay3 < 3.00 - '.vpl' Local Stack Overflow (PoC)
dos windows OSVDB-54557;CVE-2009-1660

TiGeR-Dz The Recipe Script 5 - Authentication Bypass / Database Backup
webapps php OSVDB-54556;CVE-2009-1662

Hakxer Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow
local windows OSVDB-54561;CVE-2009-1644

TiGeR-Dz Job Script 2.0 - Arbitrary Change Admin Password
webapps php OSVDB-54281;CVE-2009-1610

Jeremy Brown GrabIt 1.7.2x - NZB DTD Reference Buffer Overflow
local windows CVE-2009-1586;OSVDB-54205

YEnH4ckEr ST-Gallery 0.1a - Multiple SQL Injections
webapps php OSVDB-54793;CVE-2009-1799

TiGeR-Dz T-Dreams Job Career Package 3.0 - Insecure Cookie Handling
webapps asp OSVDB-54278;CVE-2009-1638