API tools faq
paste
FlyFar

FlyFar's Pastebin

20°59'56.99''N, 105°47'47.703''E    35,720 1,093,828 34 3 years ago
Name / Title Added Expires Hits Comments Syntax  
GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php Unrestricted File Upload - CVE-2024-31777 Apr 12th, 2024 Never 702 0 Python -
Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass Apr 11th, 2024 Never 630 0 Python -
Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload Apr 11th, 2024 Never 950 0 Python -
Casdoor < v1.331.0 - '/api/set-password' CSRF - CVE-2023-34927 Apr 11th, 2024 Never 1,235 0 Email -
RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service - CVE-2024-27686 Apr 7th, 2024 Never 1,035 0 Python -
GL-iNet MT6000 4.5.5 - Arbitrary File Download - CVE-2024-27356 Apr 7th, 2024 Never 61 0 Python -
Elementor Website Builder < 3.12.2 - Admin+ SQLi Apr 7th, 2024 Never 1,251 0 Python -
CE Phoenix v1.0.8.20 - Remote Code Execution Apr 7th, 2024 Never 711 0 Python -
Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell Apr 7th, 2024 Never 75 0 Python -
Gibbon LMS v26.0.00 - SSTI vulnerability - CVE-2024-24724 Apr 7th, 2024 Never 875 0 Python -
Nagios XI Version 2024R1.01 - SQL Injection - CVE-2024-24401 Mar 27th, 2024 Never 686 0 Python -
LBT-T300-mini1 - Remote Buffer Overflow Mar 27th, 2024 Never 449 0 C++ -
minaliC 2.0.0 - Denial of Service (DoS) Mar 22nd, 2024 Never 84 0 Perl -
TELSAT marKoni FM Transmitter 1.9.5 Root Command Injection - PoC Exploit Mar 21st, 2024 Never 4,195 0 Python -
HNAS SMU 14.8.7825 - Information Disclosure - CVE-2023-6538 Mar 21st, 2024 Never 3,566 0 Python -
Gibbon LMS < v26.0.00 - Authenticated RCE - CVE-2024-24725 Mar 21st, 2024 Never 37 0 Python -
ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE - CVE-2023-26035 Mar 21st, 2024 Never 45 0 Python -
vm2 Sandbox Escape Vulnerability - CVE-2023-37466 Mar 21st, 2024 Never 3,553 0 C -
Karaf v4.4.3 Console - RCE Mar 21st, 2024 Never 45 0 Python -
LaborOfficeFree 19.10 - MySQL Root Password Calculator - CVE-2024-1346 Mar 21st, 2024 Never 580 0 Python -
RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow - CVE-2004-2111 Mar 15th, 2024 Never 564 0 C -
hztty 2.0 (RedHat 9.0) - Local Privilege Escalation - CVE-2003-0783 Mar 15th, 2024 Never 610 0 C -
GNU CFEngine 2.-2.0.3 - Remote Stack Overflow - CVE-2003-0849 Mar 15th, 2024 Never 1,364 0 Perl -
Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service) Mar 15th, 2024 Never 922 0 Bash -
KiTTY 0.76.1.13 - Command Injection - CVE-2024-23749 Mar 14th, 2024 Never 30 0 Python -
KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow - CVE-2024-25004 Mar 14th, 2024 Never 922 0 Python -
KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow - CVE-2024-25003 Mar 14th, 2024 Never 816 0 Python -
Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE) Mar 14th, 2024 Never 645 0 Python -
Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE) - CVE-2023-5702 & CVE-2023-5222 Mar 14th, 2024 Never 821 0 Python -
SolarView Compact 6.00 - Command Injection - CVE-2023-23333 Mar 14th, 2024 Never 77 0 Python -
Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE) - CVE-2023-3710 Mar 14th, 2024 Never 795 0 Python -
RealPlayer 9 *nix - Local Privilege Escalation Mar 13th, 2024 Never 513 0 C -
VMware Cloud Director 10.5 - Bypass Identity Verification - CVE-2023-34060 Mar 13th, 2024 Never 540 0 Python -
Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE - CVE-2023-20048 Mar 13th, 2024 Never 537 0 Python -
OSGi v3.7.2 (and below) Console - RCE Mar 13th, 2024 Never 70 0 Python -
CVE-2003-0666 Mar 12th, 2024 Never 71 0 C -
Numbas < v7.3 - Remote Code Execution - CVE-2024-27612 Mar 12th, 2024 Never 1,106 0 Python -
DataCube3 v1.0 - Unrestricted file upload 'RCE' - CVE-2024-25830 + CVE-2024-25832 Mar 12th, 2024 Never 1,056 0 Python -
Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR Mar 12th, 2024 Never 667 0 Python -
WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover Mar 12th, 2024 Never 981 0 Python -
Adobe ColdFusion versions 2018,15 and 2021,5 and earlier - Arbitrary File Read - CVE-2023-26360 Mar 12th, 2024 Never 583 0 Python -
Sitecore - Remote Code Execution v8.2 - CVE-2023-35813 Mar 12th, 2024 Never 712 0 Python -
Ladder v0.0.21 - Server-side request forgery (SSRF) - CVE-2024-27620 Mar 10th, 2024 Never 3,908 0 Python -
Akaunting < 3.1.3 - RCE - CVE-2024-22836 Mar 10th, 2024 Never 1,201 0 Python -
TPC-110W - Missing Authentication for Critical Function Mar 7th, 2024 Never 662 0 C -
Boss Mini 1.4.0 - Local File Inclusion - CVE-2023-3643 Mar 6th, 2024 Never 856 0 Python -
A-PDF All to MP3 Converter 2.0.0 - DEP Bypass via HeapCreate + HeapAlloc Mar 6th, 2024 Never 32 0 Python -
GL.iNet AR300M v4.3.7 Arbitrary File Read - CVE-2023-46455 Mar 6th, 2024 Never 620 0 Python -
GL.iNet AR300M v4.3.7 Remote Code Execution - CVE-2023-46454 Mar 6th, 2024 Never 844 0 Python -
GL.iNet AR300M v3.216 Remote Code Execution - CVE-2023-46456 Mar 6th, 2024 Never 662 0 Python -
Easywall 0.3.1 - Authenticated Remote Command Execution Mar 6th, 2024 Never 625 0 Python -
Microsoft Windows - 'RPC DCOM2' Remote (MS03-039) - CVE-2003-0605 Mar 2nd, 2024 Never 1,211 0 C -
Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution - CVE-2005-0491 Mar 1st, 2024 Never 777 0 C -
Stunnel 3.24/4.00 - Daemon Hijacking - CVE-2003-0740 Mar 1st, 2024 Never 97 0 C -
eMule/xMule/LMule - OP_SERVERMESSAGE Format String Vulnerability Mar 1st, 2024 Never 982 0 C -
Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion and Remote Code Execution - CVE-2023-3452 Mar 1st, 2024 Never 2,305 0 Python -
WP Rocket < 2.10.3 - Local File Inclusion (LFI) Feb 29th, 2024 Never 985 0 Python -
Solaris 2.5.1 lp / lpsched - Symlink Feb 25th, 2024 Never 1,102 0 Bash -
suid_perl 5.001 - Command Execution - CVE-1999-0034 Feb 25th, 2024 Never 1,013 0 Bash -
Xt Library - Local Privilege Escalation - CVE-1999-0040 Feb 25th, 2024 Never 931 0 C -
Solaris 2.4 - '/bin/fdformat' Local Buffer Overflow - CVE-1999-0315/1999-0110 Feb 25th, 2024 Never 86 0 C -
IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/bin/lpstat' Local Overflow / Local Privilege Escalation Feb 24th, 2024 Never 987 0 Bash -
Novell BorderManager Enterprise Edition 3.5 - Denial of Service - CVE-2001-0486 Feb 24th, 2024 Never 703 0 C -
BeroFTPD 1.3.4(1) (Linux x86) - Remote Code Execution - CVE-2000-0573 Feb 24th, 2024 Never 642 0 C -
Cisco (Multiple Products) - A tool which automates several attacks against Cisco products Feb 24th, 2024 Never 1,409 0 Perl -
splitvt < 1.6.5 - Local Overflow - CVE-2001-0112 Feb 24th, 2024 Never 509 0 C -
sudo.bin - NLSPATH Privilege Escalation Feb 24th, 2024 Never 575 0 C -
BSD / Linux - 'umount' Local Privilege Escalation - CVE-2000-0218 Feb 24th, 2024 Never 502 0 C -
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Command Execution - CVE-1999-0744 Feb 24th, 2024 Never 1,257 0 Perl -
jaZip 0.32-2 - Local Buffer Overflow - CVE-2001-0110 Feb 24th, 2024 Never 1,366 0 Perl -
glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read - CVE-2001-0170 Feb 24th, 2024 Never 528 0 Bash -
Tru64 5 - 'su' Env Local Stack Overflow - CVE- 2002-1616 Feb 24th, 2024 Never 537 0 C -
HP-UX B11.11 - '/usr/bin/ct' Format String Privilege Escalation - CVE-2003-0090 Feb 23rd, 2024 Never 1,543 0 C -
Linux Kernel 2.4.22 - 'do_brk()' Local Privilege Escalation (2) - CVE-2003-0961 Feb 23rd, 2024 Never 857 0 C -
OpenBSD - 'ibcs2_exec' Kernel Code Execution - CVE-2003-0955 Feb 23rd, 2024 Never 778 0 C -
JFrog Artifactory < 7.25.4 - Blind SQL Injection - CVE-2021-3860 Feb 22nd, 2024 Never 1,174 0 Python -
Wondercms 4.3.2 - XSS to RCE Exploit Feb 22nd, 2024 Never 998 0 Python -
SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration - CVE-2023-3897 Feb 22nd, 2024 Never 967 0 Python -
XAMPP - Buffer Overflow PoC - CVE-2023-46517 Feb 22nd, 2024 Never 1,147 0 Python -
phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit Feb 22nd, 2024 Never 60 0 PHP -
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046) - CVE-2003-0714 Feb 17th, 2024 Never 99 0 Perl -
Microsoft Windows XP/2000 - RPC Remote Non Exec Memory - CVE-2003-0605 Feb 17th, 2024 Never 1,096 0 C -
Solaris Runtime Linker (SPARC) - 'ld.so.1' Local Buffer Overflow - CVE-2003-0609 Feb 17th, 2024 Never 944 0 C -
WordPress Core 2.0.2 - 'cache' Remote Shell Injection - CVE-2006-2667 Feb 17th, 2024 Never 207 0 PHP -
NIPrint LPD-LPR Print Server 4.10 - Remote Overflow - CVE-2003-1142 Feb 17th, 2024 Never 905 0 C -
Solaris Sadmind - Default Configuration Remote Code Execution - CVE-2003-0722 Feb 16th, 2024 Never 1,484 0 Perl -
CVE-2003-0666 Feb 16th, 2024 Never 816 0 C -
DS Wireless Communication Remote Code Execution - CVE-2023-45887 Feb 16th, 2024 Never 943 0 Python -
Smart Contract Vulnerability - Lack of Precision Feb 16th, 2024 Never 955 0 Email -
Smart Contract Vulnerability - DoS with (Unexpected) revert Feb 16th, 2024 Never 969 0 Email -
Smart Contract Vulnerability - DoS with Block Gas Limit Feb 16th, 2024 Never 309 0 Email -
Smart Contract Vulnerability - Insufficient Gas Griefing Feb 16th, 2024 Never 201 0 Email -
Metabase 0.46.6 - Pre-Auth Remote Code Execution - CVE-2023-38646 Feb 16th, 2024 Never 89 0 Python -
Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over - CVE-2023-38965 Feb 14th, 2024 Never 1,555 0 Python -
TP LINK TL-WR849N - Remote Code Execution - CVE-2020-9374 Feb 14th, 2024 Never 91 0 Python -
ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure - CVE-2022-29457 Feb 14th, 2024 Never 971 0 Python -
ManageEngine ADSelfService Plus 6.1 - User Enumeration - CVE-2022-28987 Feb 14th, 2024 Never 1,059 0 Python -
Klog Server Unauthenticated Command Injection Vulnerability Feb 14th, 2024 Never 1,493 0 Ruby -
Klog Server 2.4.1 - Command Injection (Authenticated) Feb 13th, 2024 Never 855 0 Python -
Free SMTP Server - Local Denial of Service Crash (PoC) Feb 13th, 2024 Never 795 0 Python -
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!