12 matches found
CVE-2021-47973 Sticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow
Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger ...
CVE-2021-47971
CVE-2021-47971 affects My Notes Safe 5.3 and describes a denial of service via a buffer overflow. According to the connected documents, an attacker can crash the application by pasting excessively long strings into note fields: a payload of about 350,000 repeated characters pasted twice into a ne...
CVE-2026-31827
Alienbin 1.0.0 and earlier are affected by a vulnerability in the /save endpoint (server.js) where every new paste submission drops and recreates the MongoDB TTL index on the entire post collection. When a user submits a paste with a short TTL (e.g., 30 seconds), the TTL index is recreated with e...
CVE-2026-31827
Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...
PT-2026-24481
Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...
privatebin XSS
privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on PrivateBin will execute arbitrary JavaScript within their own session self-XSS. This allows an attacker who can entice a victi...
EUVD-2021-27332
Malware in sbrugna...
PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match
Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match. Description The PasteMonitor tool allows you to perform two main actions for educational purposes only: Download daily new public pastes Average number of pastes per day: 1000-3000 filetyp...
Design/Logic Flaw
EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...
CVE-2021-40147
CVE-2021-40147 concerns EmTec ZOC prior to version 8.02.2, described as allowing a paste sequence such as \e[201~. This vulnerability is noted as distinct from CVE-2021-32198 (which is also associated with ZOC), but the connected sources only confirm the existence of these entries and identify 8....
CVE-2021-40147
EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...
pwned - A command-line tool for querying the 'Have I been pwned?' service
A command-line tool for querying Troy Hunt's Have I been pwned? service using the hibp Node.js module. Installation npm install pwned -g Usage Usage: pwned option | command Commands: ba options get all breaches for an account username or email address breaches options get all breaches in the syst...