Lucene search
+L

44 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

HashTag

Nome: HashTag: Analizza e Identifica Hash delle Password Versione: 0.41 Data: 11/05/2013 Autore: Smeege Contatto: [email protected] Descrizione: HashTag.py è uno script Python progettato per analizzare e identificare hash delle password. Ha tre argomenti principali che consistono...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:06 a.m.1 views

twitter-intelligence

Twitter-Intelligenz Ein in Python geschriebenes Projekt zum Verfolgen und Analysieren von Twitter ohne Verwendung der Twitter-API. Voraussetzungen Dieses Projekt ist eine Python 3.x-Anwendung. Die Paketabhängigkeiten befinden sich in der Datei requirements.txt. Führen Sie diesen Befehl aus, um di...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:12 a.m.139 views

twitter-intelligence

Twitter Intelligence A project written in Python for twitter tracking and analysis without using Twitter API. Prerequisites This project is a Python 3.x application. The package dependencies are in the file requirements.txt. Run that command to install the dependencies. root@kitploit: pip3 instal...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/21 2:40 a.m.3 views

twint-utils

twint-utils Queste sono utilizzazioni di Twint. Dai un'occhiata alle nostre linee guida per la collaborazione per contribuire. Rilevamento di Follower Reciproci Mufos.py usa Twint per rilevare i follower reciproci di un dato account seed. Può essere integrato in altre pipeline più elaborate per i...

5.7AI score
SaveExploits0
EUVD
EUVD
added 2026/08/10 3:41 p.m.8 views

EUVD-2026-55656

Discourse is an open-source discussion platform. Prior to 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, Discourse has HTML injection in PrettyText.formatforemail because cooked attribute values are reparsed as markup. Crafted Vimeo iframe sources, secure-upload URLs or dimensions, and...

6.4CVSS5.3AI score0.00299EPSS
SaveExploits0References9
NVD
NVD
added 2026/05/17 1:16 p.m.30 views

CVE-2018-25334

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS0.00145EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/17 1:16 p.m.18 views

CVE-2018-25338

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS0.00267EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/17 12:12 p.m.9 views

CVE-2018-25334 Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/17 12:12 p.m.66 views

CVE-2018-25334 Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS0.00145EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/17 12:12 p.m.35 views

CVE-2018-25334

CVE-2018-25334 concerns Zechat 1.5 with a Cross-Site Request Forgery (CSRF) vulnerability that can bypass anti-CSRF protections via the hashtag parameter, enabling an attacker to induce unauthorized changes to user data. The root cause is described as exploitation of a CSRF token mechanism when a...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/17 12:12 p.m.21 views

CVE-2018-25334

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/17 12:11 p.m.48 views

CVE-2018-25338 Zechat 1.5 SQL Injection via hashtag parameter

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS0.00267EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/17 12:11 p.m.9 views

CVE-2018-25338 Zechat 1.5 SQL Injection via hashtag parameter

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/17 12:11 p.m.22 views

CVE-2018-25338

CVE-2018-25338 affects Zechat 1.5 via a SQL injection in the hashtag parameter. Unauthenticated attackers can use union-based payloads to enumerate database schema (tables/columns). The vulnerability enables potential data disclosure with high impact to confidentiality; no remediation details are...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/17 12:11 p.m.22 views

EUVD-2018-21859

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/17 12:00 a.m.21 views

PT-2026-41564

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/17 12:00 a.m.18 views

PT-2026-41560

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/17 12:00 a.m.19 views

Bylancer Zechat SQL注入漏洞

Bylancer Zechat is a PHP instant messaging system developed by Bylancer Corporation, which supports real-time messages, group chat, and social interactions. Version 1.5 of Bylancer Zechat has a SQL injection vulnerability. This vulnerability stems from SQL injections in the hashtag parameter,...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/03/11 5:28 p.m.8 views

SUSE CVE-2025-14822

Mattermost versions 10.11.x = 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens...

6.5CVSS5.8AI score0.00324EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/17 9:15 a.m.12 views

CVE-2025-14822

Mattermost versions 10.11.x = 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens...

6.5CVSS6.7AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder