BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
ASP Football Pool 2.3 Remote Database Disclosure Vulnerability01-06-2009
AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability01-06-2009
ecsportal rel 6.5 (article_view_photo.php id) SQL Injection Vulnerability01-06-2009
R2 Newsletter Lite-Pro-Stats (admin.mdb) Database Disclosure Vuln01-06-2009
PAD Site Scripts 3.6 Remote Arbitrary Database Backup Vulnerability01-06-2009
Joomla Component Joomlaequipment 2.0.4 (com_juser) SQL Injection01-06-2009
ASMAX AR 804 gu Web Management Console Arbitrary Command Exec01-06-2009
Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities01-06-2009
Apache mod_dav - svn Remote Denial of Service Exploit01-06-2009
Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit01-06-2009
Online Grades & Attendance 3.2.6 Multiple SQL Injection Vulnerabilities01-06-2009
eliteCMS 1.01 (SQL-XSS) Multiple Remote Vulnerabilities01-06-2009
Open-school 1.0 (id) Remote SQL Injection Vulnerability01-06-2009
Escon SupportPortal Pro 3.0 (tid) Blind SQL Injection Vulnerability01-06-2009
ICQ 6.5 URL Search Hook (Windows Explorer) Remote BOF PoC01-06-2009
Linksys WAG54G2 Web Management Console Arbitrary Command Exec01-06-2009
RadCLASSIFIEDS Gold v2 (seller) Remote SQL Injection Exploit01-06-2009
Roxio CinePlayer 3.2 (IAManager.dll) Remote BOF Exploit (heap spray)01-06-2009
OCS Inventory NG 1.02 Multiple SQL Injection Vulnerabilities01-06-2009
AIMP 2.51 build 330 (ID3v1-ID3v2 Tag) Remote Stack BOF PoC (SEH)01-06-2009
ICQ 6.5 URL Search Hook (Windows Explorer) Remote Buffer Overflow PoC01-06-2009
Linux/x86 - sys_sethostname(PwNeD !!, 8) Shellcode (32 bytes)31-05-2009
Small Pirates v-2.1 (XSS-SQL) Multiple Remote Vulnerabilities29-05-2009
AMember 3.1.7 (XSS-SQL-HI) Multiple Remote Vulnerabilities29-05-2009
Joomla Component JVideo 0.3.x SQL Injection Vulnerability29-05-2009
ZeusCart <= 2.3 (maincatid) SQL Injection Vulnerability29-05-2009
Million Dollar Text Links <= 1.0 (id) SQL injection Vulnerability29-05-2009
Traidnt Up 2.0 (Auth Bypass - Cookie) SQL Injection Vulnerability29-05-2009
ecshop 2.6.2 Multiple Remote Command Execution Vulnerabilities29-05-2009
Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability29-05-2009