BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
SFS EZ Webring (cat) Remote SQL Injection Vulnerability31-10-2008
cpanel 11.x XSS - Local File Inclusion Vulnerability31-10-2008
A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability31-10-2008
U-Mail Webmail 4.91 (edit.php) Arbitrary File Write Vulnerability31-10-2008
Absolute News Manager 5.1 Insecure Cookie Handling Vulnerability31-10-2008
Absolute News Feed 1.0 Remote Insecure Cookie Handling Vulnerability31-10-2008
Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability31-10-2008
SFS EZ Adult Directory (directory.php id) SQL Injection Vulnerability31-10-2008
SFS EZ Gaming Directory (directory.php id) SQL Injection Vulnerability31-10-2008
Logz podcast CMS 1.3.1 (add_url.php art) SQL Injection Vulnerability31-10-2008
Absolute Control Panel XE 1.5 Insecure Cookie Handling Vulnerability31-10-2008
Cybershade CMS 0.2b Remote File Inclusion Vulnerability31-10-2008
Tribiq CMS 5.0.9a (beta) Insecure Cookie Handling Vulnerability31-10-2008
Tribiq CMS 5.0.10a Local File Inclusion Vulnerability (win)31-10-2008
Absolute Content Rotator 6.0 Insecure Cookie Handling Vulnerability31-10-2008
Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability31-10-2008
Absolute Banner Manager Insecure Cookie Handling Vulnerability31-10-2008
Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability31-10-2008
Tribiqcms 5.0.9a (beta) Insecure Cookie Handling Vulnerability31-10-2008
e107 Plugin lyrics_menu (lyrics_song.php l_id) SQL Injection Vulnerability31-10-2008
SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability31-10-2008
ModernBill <= 4.4.x XSS - Remote File Inclusion Vulnerability31-10-2008
SFS EZ Software (id) Remote SQL Injection Vulnerability31-10-2008
SFS EZ Auction (viewfaqs.php cat) Blind SQL Injection Vulnerability31-10-2008
Article Publisher PRO (userid) Remote SQL Injection Exploit31-10-2008
SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability31-10-2008
SFS EZ Career (content.php topic) SQL Injection Vulnerability31-10-2008
Opera 9.61 opera:historysearch Code Execution Exploit PoC30-10-2008
MyPHP Forum <= 3.0 Edit Topics-Blind SQL Injection Vulnerabilities30-10-2008
Absolute Podcast 1.0 Remote Insecure Cookie Handling Vulnerability30-10-2008