Skip to contentRansomlook Ransomlook vulnerabilities
- ransomlookRansomLook API Key Disclosure Through /admin/apikeys HTML SourceCVE-2026-785559.4 Critical
- ransomlookInsecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLookCVE-2026-785537.0 High
- ransomlookRansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication AttemptsCVE-2026-785518.8 High
- ransomlookStored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLookCVE-2026-783918.8 High
- ransomlookRansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration ModificationCVE-2026-783879.4 Critical
- ransomlookUnauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook APICVE-2026-783868.7 High
- ransomlookRansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File AccessCVE-2026-783858.2 High
- ransomlookRansomLook Arbitrary File Read via Path Traversal in Post screen FieldCVE-2026-783818.2 High
- ransomlookPrivate Group and Market Posts Disclosed Through Public Notification Channels in RansomLookCVE-2026-783808.7 High
- ransomlookRedis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook DataCVE-2026-783786.9 Medium
- ransomlookRansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note DataCVE-2026-783729.2 Critical
- ransomlookRansomLook Unauthenticated Database Export Exposes Private DataCVE-2026-783709.2 Critical
- ransomlookMissing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLookCVE-2026-783698.8 High
- ransomlookRansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information ExposureCVE-2026-405846.9 Medium