Send9 found an exploitable heap overflow in the Opera web browser. Opera was notified around the time Opera 9.6 was released. Opera 9.61 and 9.62 were released since, but still no fix, so he released a public exploit for Opera 9.62. Very bad times for Opera, as every recent releases mainly addresses security flaws that weren’t handled seriously when reported (see FM changelogs).
Another one you might care about: Plaintext Recovery Attack Against SSH, an attack verified on OpenSSH running Debian GNU/Linux.
Have phun.