Vulnerabilities

TI-2026-17770 CVE-2026-22104 · GHSA-mr39-qwfq-3rmh

Improper access control in Hashtopolis server chunk activity component

LOW 32

Improper access control in Hashtopolis server web-interface chunk activity component for versions prior to 0.14.8 allows any created account to read all cracked hashes of a Hashtopolis server instance.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0045 Published 2026-07-17 Fixed in 0.14.8 CWE-639

TI-2017-08653 CVE-2017-11682 · GHSA-cgf2-r6w4-mj7m

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to…

LOW 29

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00804 Published 2017-07-27 No fix listed CWE-79

Vulnerabilities

Filters

Improper access control in Hashtopolis server chunk activity component

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to…