hashtopolis

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

hashtopolis records in CISA KEV

No hashtopolis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hashtopolis 1 record LOW

Records

2 records

TI-2026-17770 CVE-2026-22104 · GHSA-mr39-qwfq-3rmh

Improper access control in Hashtopolis server chunk activity component

LOW 32

Improper access control in Hashtopolis server web-interface chunk activity component for versions prior to 0.14.8 allows any created account to read all cracked hashes of a Hashtopolis server instance.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0045 Published 2026-07-17 Fixed in 0.14.8 CWE-639

TI-2017-08653 CVE-2017-11682 · GHSA-cgf2-r6w4-mj7m

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to…

LOW 29

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00804 Published 2017-07-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0