BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Free Monthly Websites 2.0 Multiple Vulnerabilities04-02-2013
MAXSITE Cross-Site Scripting Vulnerability04-02-2013
noname-media Cross-Site Scripting Vulnerability04-02-2013
DataLife Engine preview.php PHP Code Injection 01-02-2013
Buffalo TeraStation TS-Series - Multiple Vulnerabilities 31-01-2013
D-Link DCS Cameras - Multiple Vulnerabilities 31-01-2013
Netgear SPH200D Multiple Vulnerabilities 31-01-2013
E-Journal Web Sql Injection Vulnerability31-01-2013
Wordpress RLSWordPressSearch plugin SQL Injection 30-01-2013
Mozilla Firefox 11.0 Crash Poc29-01-2013
Vbulletin All Version (calendar Page) Denial of Service29-01-2013
PFsense UTM Platform 2.0.1 XSS Vulnerability 29-01-2013
DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability 29-01-2013
Apple Quick Time Player (Windows) Version 7.7.3 Out of Bound Read 29-01-2013
Kohana Framework v2.3.3 Directory Traversal Vulnerability 29-01-2013
Fortinet FortiMail 400 IBE Multiple Vulnerabilities 29-01-2013
Ruby on Rails JSON Processor YAML Deserialization Code Execution 29-01-2013
PHP Weby Directory Software 1.2 Multiple Vulnerabilities 28-01-2013
Wordpress feedweb.1.7.4 plugin Sql Injection Vulnerability26-01-2013
Windows Manage Memory Payload Injection 25-01-2013
ImageCMS 4.0.0b Multiple Vulnerabilities 25-01-2013
WordPress SolveMedia 1.1.0 CSRF Vulnerability 25-01-2013
Novell eDirectory 8 Buffer Overflow 24-01-2013
SonicWALL GMS 6 Arbitrary File Upload 24-01-2013
Movable Type 4.2x, 4.3x Web Upgrade Remote Code Execution 24-01-2013
Aloaha PDF Crypter (3.5.0.1164) ActiveX Arbitrary File Overwrite 24-01-2013
Java Applet AverageRangeStatisticImpl Remote Code Execution 24-01-2013
Java Applet Method Handle Remote Code Execution 24-01-2013
ZoneMinder Video Server packageControl Command Execution 24-01-2013
Wordpress Developer Formatter CSRF Vulnerability 22-01-2013