BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit15-06-2008
Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit15-06-2008
Oxygen 2.0 (repquote) Remote SQL Injection Vulnerability15-06-2008
SH-News 3.0 Insecure Cookie Handling Vulnerability15-06-2008
Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit15-06-2008
Pre Job Board (JobSearch.php) Remote SQL Injection Vulnerability14-06-2008
Contenido 4.8.4 (RFI-XSS) Multiple Remote Vulnerabilities14-06-2008
Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities14-06-2008
PHPMyCart (shop.php cat) Remote SQL Injection Vulnerability14-06-2008
Shoutcast Admin Panel 2.0 (page) Local File Inclusion Vulnerability14-06-2008
vsftpd 2.0.5 (CWD) Remote Memory Consumption Exploit (post auth)14-06-2008
Cartweaver 3 (prodId) Remote Blind SQL Injection Exploit14-06-2008
DIY (index_topic did ) Blind SQL Injection Exploit14-06-2008
Dana IRC <= 1.3 Remote Buffer Overflow PoC14-06-2008
xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability14-06-2008
EZCMS <= 1.2 (bSQL-Admin Byapss) Multiple Remote Vulnerabilities14-06-2008
PHPEasyNews <= 1.13 RC2 (post) Remote SQL Injection Vulnerability14-06-2008
AlstraSoft AskMe Pro <= 2.1 Multiple SQL Injection Vulnerabilities14-06-2008
XChat <= 2.8.7b (URI Handler) Remote Code Execution Exploit (ie6-ie7)13-06-2008
Butterfly Organizer 2.0.0 (SQL-XSS) Multiple Remote Vulnerabilities13-06-2008
WebChamado 1.1 Arbitrary Add Admin Exploit13-06-2008
Mambo Component galleries 1.0 (aid) Remote SQL Injection Exploit13-06-2008
Butterfly Organizer 2.0.0 Arbitrary Delete (Category-Account) Exploit13-06-2008
Easy-Clanpage 3.0b1 (section) Local File Inclusion Vulnerability13-06-2008
WebChamado 1.1 (tsk_id) Remote SQL Injection Vulnerability13-06-2008
Pre News Manager <= 1.0 (index.php id) SQL Injection Vulnerability13-06-2008
Pre Ads Portal <= 2.0 Remote SQL Injection Vulnerability13-06-2008
E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability13-06-2008
GLLCTS2 (listing.php sort) Remote Blind SQL Injection Exploit13-06-2008
PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability13-06-2008