Lucene search
K

12 matches found

Cvelist
Cvelist
added 2026/05/16 3:26 p.m.33 views

CVE-2021-47973 Sticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger ...

8.7CVSS0.00052EPSS
Exploits0References2
CVE
CVE
added 2026/05/16 3:26 p.m.7 views

CVE-2021-47971

CVE-2021-47971 affects My Notes Safe 5.3 and describes a denial of service via a buffer overflow. According to the connected documents, an attacker can crash the application by pasting excessively long strings into note fields: a payload of about 350,000 repeated characters pasted twice into a ne...

8.7CVSS5.8AI score0.00052EPSS
Exploits0References2
CVE
CVE
added 2026/03/10 9:39 p.m.5 views

CVE-2026-31827

Alienbin 1.0.0 and earlier are affected by a vulnerability in the /save endpoint (server.js) where every new paste submission drops and recreates the MongoDB TTL index on the entire post collection. When a user submits a paste with a short TTL (e.g., 30 seconds), the TTL index is recreated with e...

7.1CVSS5.8AI score0.00048EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 9:39 p.m.0 views

CVE-2026-31827

Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...

7.1CVSS5.8AI score0.00048EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.2 views

PT-2026-24481

Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...

7.1CVSS5.8AI score0.00048EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2025/11/09 12:0 a.m.6 views

privatebin XSS

privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on PrivateBin will execute arbitrary JavaScript within their own session self-XSS. This allows an attacker who can entice a victi...

5.8CVSS6.8AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-27332

Malware in sbrugna...

9.8CVSS9.2AI score0.00504EPSS
Exploits0References2
Kitploit
Kitploit
added 2022/01/10 8:30 p.m.222 views

PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match

Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match. Description The PasteMonitor tool allows you to perform two main actions for educational purposes only: Download daily new public pastes Average number of pastes per day: 1000-3000 filetyp...

7.5AI score
Exploits0References5
Prion
Prion
added 2021/08/26 4:15 p.m.14 views

Design/Logic Flaw

EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...

7.5CVSS9.4AI score0.00568EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/08/26 3:55 p.m.40 views

CVE-2021-40147

CVE-2021-40147 concerns EmTec ZOC prior to version 8.02.2, described as allowing a paste sequence such as \e[201~. This vulnerability is noted as distinct from CVE-2021-32198 (which is also associated with ZOC), but the connected sources only confirm the existence of these entries and identify 8....

9.8CVSS9.4AI score0.00504EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/26 3:55 p.m.12 views

CVE-2021-40147

EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...

9.7AI score0.00504EPSS
Exploits0References1
Kitploit
Kitploit
added 2018/09/17 12:29 p.m.31 views

pwned - A command-line tool for querying the 'Have I been pwned?' service

A command-line tool for querying Troy Hunt's Have I been pwned? service using the hibp Node.js module. Installation npm install pwned -g Usage Usage: pwned option | command Commands: ba options get all breaches for an account username or email address breaches options get all breaches in the syst...

7.4AI score
Exploits0References2
Rows per page
Query Builder