#ssti
Live, measured metrics for the hashtag #ssti from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #ssti
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-11-08 19:12 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-11-08 19:12 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-11-08 19:12 UTCEverything below is measured over the latest 20 public posts (spanning ~34733 hours).
Posting hours (UTC) — busiest: 01:00
Languages: English (15) · Russian (4) · German (1)
Avg boosts / post: 0.8
Top of the latest posts
CVE-2026-119144 — Frappe Framework SSTI, CVSS 8.8 The CVE describes DB read/write via Jinja2 template injection. The August research describes the full chain: frappe.new_doc writes a Python file, frappe.db.set_value registers it as an insta
A critical Prompty vulnerability (CVE-2026-73299, CVSS 10) let a crafted .prompty file escape the template engine and run arbitrary JavaScript in Node.js. #Prompty #Microsoft #SSTI #RCE #CVE202673299 https://meterpreter.org/prompty-cve-2026
Подмена страницы интернет-банка First Partner Bank на Standoff 365 Привет, Хабр! Будем знакомы — grizzzer, участник различных CTF-команд и независимый исследователь кибербезопасности. В этой статье разберу, как я реализовал критическое собы
#ssti across platforms
every network with a public tag surfaceFollow #ssti straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/ssti