Search results

Path traversal in analytics CSV/username download routes (unsanitized customer_id/hashfile_id)

AnalyticsChanges/improvements/bugs related to the Analytics PageChanges/improvements/bugs related to the Analytics Page

bugSomething isn't workingSomething isn't working

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#216 In hashview/hashview;

· bandrel opened on Jun 13, 2026

API v1_api_search: HTML 400 on empty body + KeyError 500 on missing 'hash'

bugSomething isn't workingSomething isn't working

Status: Open.

#213 In hashview/hashview;

· bandrel opened on Jun 13, 2026

API v1_api_post_add_job returns HTML 400 on empty body (get_json without silent)

bugSomething isn't workingSomething isn't working

Status: Open.

#212 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Search results Export is broken (passes None instead of results)

bugSomething isn't workingSomething isn't working

Status: Open.

#211 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Assigning a hashfile to a running/queued job raises BuildError (wrong url_for endpoint)

bugSomething isn't workingSomething isn't working

Jobs

Status: Open.

#210 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Combinator-mode task edit raises 500 (j_rule/k_rule stored as tuple)

bugSomething isn't workingSomething isn't working

Status: Open.

#209 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Deleting a customer with uncracked hashes raises 500 (Query compared to int)

bugSomething isn't workingSomething isn't working

Status: Open.

#208 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Dead, unreachable duplicate attack-mode blocks in tasks_add

bugSomething isn't workingSomething isn't working

pythonPull requests that update python codePull requests that update python code

Status: Open.

#207 In hashview/hashview;

· bandrel opened on Jun 13, 2026

IDOR: a job can be assigned a hashfile belonging to another customer

bugSomething isn't workingSomething isn't working

Jobs

pythonPull requests that update python codePull requests that update python code

securitySecurity vulnerability or hardeningSecurity vulnerability or hardening

Status: Open.

#206 In hashview/hashview;

· bandrel opened on Jun 13, 2026

assigned_hashfile page 500s for a Running/Queued job (bad url_for endpoint)

bugSomething isn't workingSomething isn't working

Jobs

pythonPull requests that update python codePull requests that update python code

Status: Open.

#205 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Duplicate task/job name validators never run (silently accepted)

bugSomething isn't workingSomething isn't working

pythonPull requests that update python codePull requests that update python code

Status: Open.

#204 In hashview/hashview;

· bandrel opened on Jun 13, 2026

Deleting a customer with an uncracked hash returns HTTP 500

bugSomething isn't workingSomething isn't working

pythonPull requests that update python codePull requests that update python code

Status: Open.

#203 In hashview/hashview;

· bandrel opened on Jun 13, 2026