Skip to content
Ransomlook vulnerabilities
Newest
-
ransomlook
RansomLook API Key Disclosure Through /admin/apikeys HTML Source
CVE-2026-78555
9.4 Critical
-
ransomlook
Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook
CVE-2026-78553
7.0 High
-
ransomlook
RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts
CVE-2026-78551
8.8 High
-
ransomlook
Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook
CVE-2026-78391
8.8 High
-
ransomlook
RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification
CVE-2026-78387
9.4 Critical
-
ransomlook
Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API
CVE-2026-78386
8.7 High
-
ransomlook
RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access
CVE-2026-78385
8.2 High
-
ransomlook
RansomLook Arbitrary File Read via Path Traversal in Post screen Field
CVE-2026-78381
8.2 High
-
ransomlook
Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook
CVE-2026-78380
8.7 High
-
ransomlook
Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
CVE-2026-78378
6.9 Medium
-
ransomlook
RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data
CVE-2026-78372
9.2 Critical
-
ransomlook
RansomLook Unauthenticated Database Export Exposes Private Data
CVE-2026-78370
9.2 Critical
-
ransomlook
Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook
CVE-2026-78369
8.8 High
-
ransomlook
RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure
CVE-2026-40584
6.9 Medium