BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
NTPsec 1.1.2 - 'ntp_control' Out-of-Bounds Read (PoC)16-01-2019
Blueimp's jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit16-01-2019
Google Chrome V8 JavaScript Engine 71.0.3578.98 - Out-of-Memory in Invalid Array Length16-01-2019
Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset16-01-2019
ShoreTel / Mitel Connect ONSITE 19.49.5200.0 - Remote Code Execution16-01-2019
FortiGate FortiOS < 6.0.3 - LDAP Credential Disclosure16-01-2019
Roxy Fileman 1.4.5 - Arbitrary File Download16-01-2019
Spotify 1.0.96.181 - 'Proxy configuration' Denial of Service (PoC)16-01-2019
doorGets CMS 7.0 - Arbitrary File Download16-01-2019
ownDMS 4.7 - SQL Injection15-01-2019
Microsoft Windows VCF - Remote Code Execution15-01-2019
Linux/x86 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (100 bytes)15-01-2019
1Password < 7.0 - Denial of Service15-01-2019
Cleanto 5.0 - SQL Injection14-01-2019
i-doit CMDB 1.12 - SQL Injection14-01-2019
Live Call Support Widget 1.5 - Remote Code Execution / SQL Injection14-01-2019
Lenovo R2105 - Cross-Site Request Forgery (Command Execution)14-01-2019
Hucart CMS 5.7.4 - Cross-Site Request Forgery (Add Administrator Account)14-01-2019
Real Estate Custom Script 2.0 - SQL Injection14-01-2019
ThinkPHP 5.X - Remote Command Execution14-01-2019
Craigs Classified Ads CMS Theme 1.0.2 - SQL Injection14-01-2019
Bigcart - Ecommerce Multivendor System 1.0 - SQL Injection14-01-2019
Umbraco CMS 7.12.4 - Authenticated Remote Code Execution14-01-2019
HealthNode Hospital Management System 1.0 - SQL Injection14-01-2019
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection14-01-2019
Modern POS 1.3 - SQL Injection14-01-2019
xorg-x11-server < 1.20.3 - Local Privilege Escalation (Solaris 11 inittab)14-01-2019
Horde Imp - 'imap_open' Remote Command Execution14-01-2019
Job Portal Platform 1.0 - SQL Injection14-01-2019
Live Call Support Widget 1.5 - Cross-Site Request Forgery (Add Admin)14-01-2019