BugSearch è un portale d'informazione sul mondo della sicurezza web e non che offre una serie di servizi utili a divulgare rapidamente ai propri utenti registrati gli avvisi di sicurezza scoperti nella rete, in modo tale da poter essere avvisati tempestivamente su bachi, falle di sistema, exploit e threats che affliggono le applicazioni e correggerle nel minor tempo possibile.

Novità: Invia Nuovo Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Gitlab-shell Code Execution 19-08-2014
Firefox toString console.time Privileged Javascript Injection 19-08-2014
Tenda A5s Router 3.02.05_CN - Authentication Bypass Vulnerability 18-08-2014
Alienvault Open Source SIEM (OSSIM) < 4.7.0 - 'get_license' Remote Command Execution (Metasploit)14-08-2014
VirtualBox 3D Acceleration Virtual Machine Escape 14-08-2014
Disqus for Wordpress 2.7.5 Admin Stored CSRF and XSS 14-08-2014
VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution 14-08-2014
BlazeDVD Pro 7.0 - (.plf) Stack Based Buffer Overflow (Direct RET) 13-08-2014
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation 13-08-2014
HybridAuth 2.2.2 - Remote Code Execution 13-08-2014
TomatoCart 1.x - SQL Injection Vulnerability 09-08-2014
Easy FTP Pro 4.2 iOS - Command Injection Vulnerabilities 09-08-2014
SHARP MX Series - Denial of Service 09-08-2014
Sky Broadband Router SR101 - Weak WPA-PSK Generation Algorithm 09-08-2014
Linux/x86 - Reverse TCP (127.1.1.1:1337/TCP) Shell Shellcode (74 bytes)25-07-2014
Linux/x86 - Bind TCP (1337/TCP) Shell Shellcode (89 bytes)13-07-2014
Baidu Spark Browser v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS) 02-07-2014
Zurmo CRM - Persistent XSS Vulnerability 02-07-2014
Kerio Control 8.3.1 - Blind SQL Injection 02-07-2014
Internet Explorer 8 - Fixed Col Span ID Full ASLR, DEP & EMET 4.1.X Bypass 01-07-2014
Flussonic Media Server 4.1.25 - 4.3.3 - Aribtrary File Disclosure 01-07-2014
IBM Algorithmics RICOS 4.5.0 - 4.7.0 - Multiple Vulnerabilities 01-07-2014
Gitlist <= 0.4.0 - Remote Code Execution 30-06-2014
Linux/x86 - shutdown -h now Shellcode (56 bytes)27-06-2014
Linux/x86-64 - shutdown -h now Shellcode (65 bytes)27-06-2014
Thomson TWG87OUIR - POST Password CSRF 25-06-2014
Cogent DataHub Command Injection 25-06-2014
AlienVault OSSIM av-centerd Command Injection 24-06-2014
D-Link authentication.cgi Buffer Overflow 24-06-2014
Lunar CMS 3.3 - CSRF And Stored XSS Vulnerability 24-06-2014