High-Tech Bridge Symphony 2.2.4 - Cross-Site Request Forgery
webapps php CVE-2013-7346;OSVDB-91983

HJauditing Employee Tim WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection
webapps php OSVDB-91980;CVE-2013-3536

SEC Consult Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities
webapps linux CVE-2013-2643;CVE-2013-2642;CVE-2013-2641;OSVDB-91957;OSVDB-91956;OSVDB-91955;OSVDB-91954;OSVDB-91953;OSVDB-91952

Metasploit HP System Management Homepage - Local Privilege Escalation (Metasploit)
local linux OSVDB-91990

Sense of Security Google AD Sync Tool - Exposure of Sensitive Information
local multiple OSVDB-91982

Simon Bieber e107 - 'content_preset.php' Cross-Site Scripting
webapps php CVE-2013-2750;OSVDB-91981

anonymous C2 WebResource - 'File' Cross-Site Scripting
webapps asp CVE-2013-0125;OSVDB-91984

MizoZ Pollen CMS 0.6 - 'index.php?p' Paramete' Local File Disclosure
webapps php OSVDB-91977

DaOne Flatnux CMS 2013-01.17 - 'index.php' Local File Inclusion
webapps php OSVDB-91937

DaOne Stradus CMS 1.0beta4 - Multiple Vulnerabilities
webapps php OSVDB-91947;OSVDB-91946;OSVDB-91945;OSVDB-91944;OSVDB-91943;OSVDB-91942

DaOne Slash CMS - Multiple Vulnerabilities
webapps php OSVDB-91940;OSVDB-91939;OSVDB-91938

cr4wl3r Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting
webapps php OSVDB-91935

Petrol Designs Winamp 5.04 - '.wsz' Skin File Remote Code Execution
remote windows OSVDB-9195;CVE-2004-0820

Lethalman Splatt Forum 3/4 - Post Icon HTML Injection
webapps php CVE-2003-0590;OSVDB-9190

SPI Labs Sun ONE Application Server 7.0 - Error Message Cross-Site Scripting
remote windows CVE-2003-0413;OSVDB-9191

Julio Cesar Happymall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' Cross-Site Scripting
webapps cgi CVE-2003-0278;OSVDB-9196