BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
cpCommerce 1.2.8 (id_document) Blind SQL Injection Vulnerability16-04-2009
Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes16-04-2009
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities16-04-2009
chCounter 3.1.3 (Login Bypass) SQL Injection Vulnerability16-04-2009
MagicISO CCD-Cue Local Heap Overflow Exploit PoC16-04-2009
Zervit Webserver 0.02 Remote Directory Traversal Vulnerability16-04-2009
Job2C 4.2 (adtype) Local File Inclusion Vulnerability15-04-2009
Zervit Webserver 0.02 Remote Buffer Overflow PoC15-04-2009
phpAdBoardPro (config.inc) Config File Disclosure Vulnerability15-04-2009
phpDatingClub (conf.inc) File Disclosure Vulnerability15-04-2009
Job2C (conf.inc) Config File Disclosure Vulnerability15-04-2009
Job2C 4.2 (adtype) Multiple Local File Inclusion Vulnerabilities15-04-2009
Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit15-04-2009
MS Windows Media Player (.mid File) Integer Overflow PoC15-04-2009
FreeWebshop.org 2.2.9 RC2 (lang_file) Local File Inclusion Vulnerability15-04-2009
Job2C 4.2 (profile) Remote Shell Upload Vulnerability15-04-2009
phpAdBoard (conf.inc) Remote Config File Disclosure Vulnerability15-04-2009
phpGreetCards (conf.inc) Config File Disclosure Vulnerability15-04-2009
W2B Restaurant 1.2 (conf.inc) Config File Disclosure Vulnerability15-04-2009
OpenBSD <= 4.5 IP datagram Null Pointer Deref DoS Exploit14-04-2009
RQMS (Rash) <= 1.2.2 Multiple SQL Injection Vulnerabilities14-04-2009
PowerCHM 5.7 (Long URL) Local Stack Overflow PoC14-04-2009
W2B phpEmployment (conf.inc) File Disclosure VUlnerability14-04-2009
Jamroom (index.php t) Local File Inclusion Vulnerability14-04-2009
AbleSpace 1.0 (XSS-BSQL) Multiple Remote Vulnerabilities14-04-2009
PHP-Revista 1.1.2 (RFI-SQLi-CB-XSS) Multiple Remote Vulnerabilities14-04-2009
Shadow Stream Recorder (.m3u file) Universal Stack Overflow Exploit14-04-2009
Easy RM to MP3 Converter Universal Stack Overflow Exploit14-04-2009
MonGoose 2.4 Webserver Directory Traversal Vulnerability (win)14-04-2009
Steamcast 0.9.75b Remote Denial of Service Exploit14-04-2009