BugSearch è un portale d'informazione sul mondo della sicurezza web e non che offre una serie di servizi utili a divulgare rapidamente ai propri utenti registrati gli avvisi di sicurezza scoperti nella rete, in modo tale da poter essere avvisati tempestivamente su bachi, falle di sistema, exploit e threats che affliggono le applicazioni e correggerle nel minor tempo possibile.

Novità: Invia Nuovo Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Linux Kernel - 'AF_PACKET' Use-After-Free17-10-2017
Shadowsocks - Log File Command Execution17-10-2017
OpenText Documentum Content Server - Privilege Escalation17-10-2017
Microsoft Windows - 'nt!NtQueryObject (ObjectNameInformation)' Kernel Pool Memory Disclosure17-10-2017
OpenText Documentum Content Server - Arbitrary File Download Privilege Escalation17-10-2017
OpenText Documentum Content Server - Arbitrary File Download17-10-2017
Microsoft Edge Chakra JIT - Incorrect GenerateBailOut Calling Patterns17-10-2017
Microsoft Edge Chakra - Accesses to Uninitialized Pointers in 'StackScriptFunction::BoxState::Box'17-10-2017
Apple iOS 10.2 (14C92) - Remote Code Execution17-10-2017
Microsoft Edge Chakra JIT - 'RegexHelper::StringReplace' Must Call the Callback Function with Updating ImplicitCallFlags17-10-2017
OpenText Documentum Content Server - dmr_content Privilege Escalation17-10-2017
shadowsocks-libev 3.1.0 - Command Execution17-10-2017
Tomcat - Remote Code Execution via JSP Upload Bypass (Metasploit)17-10-2017
Apache Solr 7.0.1 - XML External Entity Expansion / Remote Code Execution17-10-2017
Microsoft Windows 10 - WLDP/MSHTML CLSID UMCI Bypass17-10-2017
Career Portal 1.0 - SQL Injection17-10-2017
Wordpress Plugin Car Park Booking - SQL Injection17-10-2017
TP-Link WR940N - Authenticated Remote Code Exploit17-10-2017
Linux Kernel - 'AF_PACKET' Use-After-Free17-10-2017
Windows x64 - API Hooking Shellcode (117 bytes)16-10-2017
3CX Phone System 15.5.3554.1 - Directory Traversal16-10-2017
Ikraus Anti Virus 2.16.7 - Remote Code Execution16-10-2017
Webmin 1.850 - Multiple Vulnerabilities15-10-2017
Logitech Media Server - Cross-Site Scripting14-10-2017
FiberHome - Directory Traversal13-10-2017
TP-Link TL-MR3220 - Cross-Site Scripting12-10-2017
Trend Micro InterScan Messaging Security (Virtual Appliance) - Remote Code Execution (Metasploit)11-10-2017
Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit)11-10-2017
ASX to MP3 3.1.3.7 - '.m3u' Buffer Overflow11-10-2017
Complain Management System - Hard-Coded Credentials / Blind SQL injection10-10-2017