Securitylab.ir ECShop 2.5.0 - 'order_sn' SQL Injection
webapps php OSVDB-54423;CVE-2009-1622

YEnH4ckEr EZ-Blog Beta2 - 'category' SQL Injection
webapps php OSVDB-54420;CVE-2009-1626

SirGod Thickbox Gallery 2 - 'index.php' Local File Inclusion
webapps php OSVDB-54112;CVE-2009-1625

Albert Sellares iodined 0.4.2-2 - forged DNS packet Denial of Service
dos linux OSVDB-54108

Nine:Situations:Group Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)
dos windows OSVDB-54213;CVE-2009-1516

Nine:Situations:Group Zoom Player Pro 3.30 - '.m3u' Local Buffer Overflow (SEH)
local windows

brain[pillow] Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure
webapps php

Jon Oberheide libvirt_proxy 0.5.1 - Local Privilege Escalation
local linux CVE-2009-0036;OSVDB-51866

Salvatore Fresta Pragyan CMS 2.6.4 - Multiple SQL Injections
webapps php OSVDB-54162;CVE-2009-1480

YEnH4ckEr photo-rigma.biz 30 - SQL Injection / Cross-Site Scripting
webapps php OSVDB-56045;OSVDB-56044;OSVDB-56043

Cyber-Zone SDP Downloader 2.3.0 - '.asx' Local Heap Overflow (PoC)
dos windows OSVDB-54090;CVE-2009-1627

ZoRLu Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling
webapps asp OSVDB-54196;CVE-2009-1504

SirGod CS Whois Lookup - 'ip' Remote Command Execution
webapps php

AbdulAziz Hariri Recover Data for Novell Netware 1.0 - '.sav' Remote Denial of Service
dos novell

Cyber-Zone BolinTech DreamFTP Server 1.02 - 'users.dat' Arbitrary File Disclosure
remote windows

Aodrulez Home Web Server r1.7.1 (build 147) - GUI Thread-Memory Corruption
dos windows