RansomLook vulnerabilities

Newest CVEs

• CVE-2026-78555

  RansomLook API Key Disclosure Through /admin/apikeys HTML Source

  ransomlook · ransomlook

  Critical9.4
• CVE-2026-78553

  Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

  ransomlook · ransomlook

  High7.0
• CVE-2026-78551

  RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

  ransomlook · ransomlook

  High8.8
• CVE-2026-78391

  Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

  ransomlook · ransomlook

  High8.8
• CVE-2026-78387

  RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

  ransomlook · ransomlook

  Critical9.4
• CVE-2026-78386

  Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

  ransomlook · ransomlook

  High8.7
• CVE-2026-78385

  RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

  ransomlook · ransomlook

  High8.2
• CVE-2026-78381

  RansomLook Arbitrary File Read via Path Traversal in Post screen Field

  ransomlook · ransomlook

  High8.2
• CVE-2026-78380

  Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

  ransomlook · ransomlook

  High8.7
• CVE-2026-78378

  Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

  ransomlook · ransomlook

  Medium6.9