BugSearch è un portale d'informazione sul mondo della sicurezza web e non che offre una serie di servizi utili a divulgare rapidamente ai propri utenti registrati gli avvisi di sicurezza scoperti nella rete, in modo tale da poter essere avvisati tempestivamente su bachi, falle di sistema, exploit e threats che affliggono le applicazioni e correggerle nel minor tempo possibile.

Novità: Invia Nuovo Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Microsoft MsMpEng - Remotely Exploitable Use-After-Free due to Design Issue in GC Engine30-05-2017
Trend Micro Deep Security version 6.5 - XML External Entity Injection / Local Privilege Escalation / Remote Code Execution30-05-2017
TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root30-05-2017
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow30-05-2017
KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution30-05-2017
Microsoft MsMpEng - Use-After-Free via Saved Callers30-05-2017
TiEmu 2.08 - Local Buffer Overflow30-05-2017
Piwigo Plugin Facetag 0.0.3 - SQL Injection30-05-2017
uc-http Daemon - Local File Inclusion / Directory Traversal30-05-2017
Samba - is_known_pipename() Arbitrary Module Load (Metasploit)29-05-2017
Octopus Deploy - Authenticated Code Execution (Metasploit)29-05-2017
Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files29-05-2017
WordPress Plugin Huge-IT Video Gallery 2.0.4 - SQL Injection29-05-2017
CERIO DT-100G-N/DT-300N/CW-300N - Multiple Vulnerabilities28-05-2017
JAD java Decompiler 1.5.8e - Local Buffer Overflow26-05-2017
Microsoft MsMpEng - Multiple Problems Handling ntdll!NtControlChannel Commands26-05-2017
QWR-1104 Wireless-N Router - Cross-Site Scripting26-05-2017
Home Web Server 1.9.1 build 164 - Remote Code Execution26-05-2017
Google Chrome 60.0.3080.5 V8 JavaScript Engine - Out-of-Bounds Write26-05-2017
Mozilla Firefox < 53 - 'gfxTextRun' Out-of-Bounds Read25-05-2017
WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting25-05-2017
WebKit - Stealing Variables via Page Navigation in FrameLoader::clear25-05-2017
WebKit - 'ContainerNode::parserInsertBefore' Universal Cross-Site Scripting25-05-2017
Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site Scripting25-05-2017
WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting25-05-2017
Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scripting25-05-2017
Apple WebKit / Safari 10.0.3(12602.4.8) - 'WebCore::FrameView::scheduleRelayout' Use-After-Free25-05-2017
Skia Graphics Library - Heap Overflow due to Rounding Error in SkEdge::setLine25-05-2017
Mozilla Firefox < 53 - 'ConvolvePixel' Memory Disclosure25-05-2017
Sandboxie 5.18 - Local Denial of Service25-05-2017