Lucene search
+L

48 matches found

Kitploit
Kitploit
•added 2026/10/05 12:18 p.m.•9 views

twitter-intelligence

Inteligencia de Twitter Un proyecto escrito en Python para el seguimiento y análisis de Twitter sin usar la API de Twitter. Prerrequisitos Este proyecto es una aplicación de Python 3.x. Las dependencias del paquete están en el archivo requirements.txt. Ejecute ese comando para instalar las...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/05 12:18 p.m.•145 views

twitter-intelligence

Twitter Intelligence A project written in Python for twitter tracking and analysis without using Twitter API. Prerequisites This project is a Python 3.x application. The package dependencies are in the file requirements.txt. Run that command to install the dependencies. pip3 install -r...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/05 10:52 a.m.•17 views

HashTag

Nombre: HashTag: Analizar e Identificar Hashes de Contraseñas Versión: 0.41 Fecha: 11/05/2013 Autor: Smeege Contacto: [email protected] Descripción: HashTag.py es un script de Python escrito para analizar e identificar hashes de contraseñas. Tiene tres argumentos principales que consisten en...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 2:41 a.m.•9 views

twint-utils

twint-utils 这些是 Twint 的实用工具。请查看我们的协作指南以参与贡献。 互关检测器 Mufos.py 使用 Twint 检测指定种子账号的互关关注者。它可以集成到用于社交网络或环境检测的其他更复杂的流程中。目前对于粉丝/关注量巨大的账号来说,它太慢而无法实用。这里有一个托管版本,你可以在游乐场模式下打开并试用。 媒体下载器 接受 twint.output.tweetslist 作为参数。 from twintutils.tweets import mediadownloader tweets = twint.output.tweetslist location = "....

6.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•21 views

PT-2026-73247

Discourse is an open-source discussion platform. Prior to 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0, Discourse has HTML injection in PrettyText.format for email because cooked attribute values are reparsed as markup. Crafted Vimeo iframe sources, secure-upload URLs or dimensions, and hashtag...

6.4CVSS5.3AI score0.00408EPSS
SaveExploits0References11
EUVD
EUVD
•added 2026/08/10 3:41 p.m.•15 views

EUVD-2026-55656

Discourse is an open-source discussion platform. Prior to 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, Discourse has HTML injection in PrettyText.formatforemail because cooked attribute values are reparsed as markup. Crafted Vimeo iframe sources, secure-upload URLs or dimensions, and...

6.4CVSS5.3AI score0.00408EPSS
SaveExploits0References9
NVD
NVD
•added 2026/05/17 1:16 p.m.•25 views

CVE-2018-25338

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS0.00267EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/17 1:16 p.m.•37 views

CVE-2018-25334

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS0.00145EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/17 12:12 p.m.•14 views

CVE-2018-25334 Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/17 12:12 p.m.•73 views

CVE-2018-25334 Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS0.00145EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/17 12:12 p.m.•40 views

CVE-2018-25334

CVE-2018-25334 concerns Zechat 1.5 with a Cross-Site Request Forgery (CSRF) vulnerability that can bypass anti-CSRF protections via the hashtag parameter, enabling an attacker to induce unauthorized changes to user data. The root cause is described as exploitation of a CSRF token mechanism when a...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/17 12:12 p.m.•25 views

CVE-2018-25334

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/05/17 12:11 p.m.•56 views

CVE-2018-25338 Zechat 1.5 SQL Injection via hashtag parameter

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS0.00267EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/17 12:11 p.m.•30 views

CVE-2018-25338

CVE-2018-25338 affects Zechat 1.5 via a SQL injection in the hashtag parameter. Unauthenticated attackers can use union-based payloads to enumerate database schema (tables/columns). The vulnerability enables potential data disclosure with high impact to confidentiality; no remediation details are...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/17 12:11 p.m.•13 views

CVE-2018-25338 Zechat 1.5 SQL Injection via hashtag parameter

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/17 12:11 p.m.•28 views

EUVD-2018-21859

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/17 12:00 a.m.•23 views

Bylancer Zechat SQL注入漏洞

Bylancer Zechat is a PHP instant messaging system developed by Bylancer Corporation, which supports real-time messages, group chat, and social interactions. Version 1.5 of Bylancer Zechat has a SQL injection vulnerability. This vulnerability stems from SQL injections in the hashtag parameter,...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/17 12:00 a.m.•26 views

PT-2026-41560

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/17 12:00 a.m.•26 views

PT-2026-41564

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/17 12:00 a.m.•2 views

CVE-2018-25334: Cross-Site Request Forgery (CSRF)

Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder