BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Wordpress N-Media Website Contact Form with File Upload 1.3.4 - Shell Upload Vulnerability 13-04-2015
Elipse SCADA 2.29 b141 - DLL Hijacking 10-04-2015
Mac OS X rootpipe Local Privilege Escalation 09-04-2015
Barracuda Firmware <= 5.0.0.012 reporting Post Auth Remote Root 09-04-2015
BOA Web Server 0.94.8.2 - Arbitrary File Access 09-04-2015
Solarwinds Firewall Security Manager 6.6.5 Client Session Handling 08-04-2015
ZENworks Configuration Management 11.3.1 - Remote Code Execution 08-04-2015
Wordpress Traffic Analyzer Plugin 3.4.2 - Blind SQL Injection 08-04-2015
Balero CMS 0.7.2 Multiple Blind SQL Injection Vulnerabilities 08-04-2015
Balero CMS 0.7.2 Multiple JS/HTML Injection Vulnerabilities 08-04-2015
Shareaholic 7.6.0.3 Persistent XSS 08-04-2015
WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability 08-04-2015
Shellcode: Linux x86 Egg-hunter (20 bytes) 08-04-2015
Shellcode: Linux x86 Typewriter Shellcode Generator 08-04-2015
w3tw0rk / Pitbull Perl IRC Bot Remote Code Execution PoC Exploit 06-04-2015
JBoss Seam 2 File Upload and Execute 06-04-2015
Wordpress Simple Ads Manager 2.5.94 - Arbitrary File Upload 02-04-2015
WordPress VideoWhisper Video Presentation 3.31.17 - Remote File Upload 02-04-2015
phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection 02-04-2015
Wordpress Simple Ads Manager - Information Disclosure 02-04-2015
Wordpress Simple Ads Manager Plugin - Multiple SQL Injection 02-04-2015
Wordpress Video Gallery Plugin 2.8 - Multiple CSRF Vulnerabilities 02-04-2015
VideoWhisper Video Conference Integration 4.91.8 - Remote File Upload 02-04-2015
Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal 02-04-2015
Wordpress WP Easy Slideshow Plugin 1.0.3 - Multiple Vulnerabilities 02-04-2015
Spybot Search & Destroy 1.6.2 Security Center Service - Privilege Escalation 17-03-2015
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 - Block Title Handler Cross-Site Scripting 17-03-2015
Metasploit Project < 4.11.1 Initial User Creation CSRF 17-03-2015
Adobe Flash Player PCRE Regex Vulnerability 17-03-2015
WordPress SEO by Yoast 1.7.3.3 - Blind SQL Injection 16-03-2015