BugSearch è un portale d'informazione sul mondo della sicurezza web e non che offre una serie di servizi utili a divulgare rapidamente ai propri utenti registrati gli avvisi di sicurezza scoperti nella rete, in modo tale da poter essere avvisati tempestivamente su bachi, falle di sistema, exploit e threats che affliggono le applicazioni e correggerle nel minor tempo possibile.

Novità: Invia Nuovo Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
HP Data Protector 6.1 EXEC_CMD Remote Code Execution - [CVE: 2011-0923] 25-02-2012
CreateVision CMS Database injection. 25-02-2012
Tiny HTTP Server <=v1.1.9 Remote Crash PoC 25-02-2012
webgrind 1.0 (file param) Local File Inclusion Vulnerability 25-02-2012
cPassMan v1.82 Remote Command Execution Exploit 25-02-2012
YVS Image Gallery Sql Injection 25-02-2012
Sun Java Web Start Plugin Command Line Argument Injection (2012) - [CVE: 2012-0500] 24-02-2012
The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution - [CVE: 2011-2944] 24-02-2012
phpDenora <= 1.4.6 Multiple SQL Injection Vulnerabilities 23-02-2012
Snom IP Phone Privilege Escalation - Security Advisory - SOS-12-001 23-02-2012
Unity 3D Web Player <= 3.2.0.61061 Denial of Service 22-02-2012
D-Link DSL-2640B Authentication Bypass 22-02-2012
WebcamXP and Webcam 7 Directory Traversal Vulnerability 22-02-2012
Dlink DCS series CSRF Change Admin Password 22-02-2012
Limesurvey (PHPSurveyor v.1.91+ stable) Blind SQL Injection 22-02-2012
DAMN Hash Calculator v1.5.1 Local Heap Overflow PoC 22-02-2012
BRIM < 2.0.0 SQL Injection 22-02-2012
ForkCMS 3.2.5 Multiple Vulnerabilities 22-02-2012
Sagem F@ST 2604 CSRF Vulnerability (ADSL Router) 22-02-2012
DFLabs PTK <= 1.0.5 Multiple Vulnerabilities (Steal Authentication Credentials) 22-02-2012
Cisco Linksys WAG54GS CSRF Change Admin Password 21-02-2012
DJ Studio Pro 5.1.6.5.2 SEH Exploit MSF - [CVE: 2009-4656] 20-02-2012
Blade API Monitor Unicode Bypass (Serial Number BOF) 20-02-2012
D-Link DSL-2640B (ADSL Router) CSRF Vulnerability 20-02-2012
PlumeCMS <= 1.2.4 CSRF Vulnerability 20-02-2012
4PSA CMS SQL Injection Vulnerabilities 19-02-2012
SyndeoCMS <= 3.0 CSRF Vulnerability 19-02-2012
almnzm 2.4 <= CSRF Vulnerability (Add Admin) 18-02-2012
Mitra Iranian CMS Remote File Upload 18-02-2012
Pandora FMS v4.0.1 - Local File Include Vulnerability 18-02-2012