BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit30-03-2006
PeerCast <= 0.1216 Remote Buffer Overflow Exploit (win32) (meta)30-03-2006
EzASPSite <= 2.0 RC3 (Scheme) Remote SQL Injection Exploit29-03-2006
Tru64 UNIX 5.0 (Rev. 910) rdist NLSPATH Buffer Overflow Exploit29-03-2006
Tru64 UNIX 5.0 (Rev. 910) edauth NLSPATH Buffer Overflow Exploit29-03-2006
PHPCollab 2.x - NetOffice 2.x (sendpassword.php) SQL Injection Exploit28-03-2006
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)28-03-2006
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)28-03-2006
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit28-03-2006
RealPlayer <= 10.5 (6.0.12.1040-1348) SWF Buffer Overflow PoC28-03-2006
MS Office Products Array Index Bounds Error (unpatched) PoC27-03-2006
CuteNews <= 1.4.1 (function.php) Local File Include Exploit26-03-2006
Vavoom <= 1.19.1 [Multiple Vulnerabilities] Denial of Service Exploit26-03-2006
csDoom <= 0.7 [Multiple Vulnerabilities] Denial of Service Exploit26-03-2006
Aztek Forum 4.00 (myadmin.php) User Privilege Escalation Exploit26-03-2006
WebAlbum <= 2.02pl COOKIE[skin2] Remote Code Execution Exploit25-03-2006
PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit25-03-2006
phpBookingCalendar <= 1.0c [details_view.php] Remote SQL Injection25-03-2006
TFT Gallery <= 0.10 [Password Disclosure] Remote Exploit25-03-2006
MS Internet Explorer (createTextRang) Remote Code Execution Exploit23-03-2006
MS Internet Explorer (createTextRang) Download Shellcoded Exploit23-03-2006
ASP.NET w3wp (COM Components) Remote Crash Exploit22-03-2006
BomberClone < 0.11.6.2 (Error Messages) Remote Buffer Overflow Exploit22-03-2006
MS Windows XP-2003 (IGMP v3) Denial of Service Exploit (MS06-007) (2)22-03-2006
MS Internet Explorer 6.0 (mshtml.dll checkbox) Crash22-03-2006
XHP CMS <= 0.5 (upload) Remote Command Execution Exploit22-03-2006
BomberClone < 0.11.6.2 (Error Messages) Remote Buffer Overflow Exploit22-03-2006
MS Internet Explorer 6.0 (script action handlers) (mshtml.dll) DoS21-03-2006
MS Windows XP-2003 (IGMP v3) Denial of Service Exploit (MS06-007)21-03-2006
FreeWPS <= 2.11 (images.php) Remote Code Execution Exploit21-03-2006