RRansomLook

Products

Exploited and recent CVEs

• CVE-2026-78555 Critical 9.4 RansomLook API Key Disclosure Through /admin/apikeys HTML Source 0.4%
• CVE-2026-78553 High 7.0 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook 0.2%
• CVE-2026-78551 High 8.8 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts 0.6%
• CVE-2026-78391 High 8.8 Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook 0.4%
• CVE-2026-78387 Critical 9.4 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification 0.6%
• CVE-2026-78386 High 8.7 Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API 0.8%
• CVE-2026-78385 High 8.2 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access 0.4%
• CVE-2026-78381 High 8.2 RansomLook Arbitrary File Read via Path Traversal in Post screen Field 0.6%
• CVE-2026-78380 High 8.7 Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook 0.4%
• CVE-2026-78378 Medium 6.9 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data 0.4%
• CVE-2026-78372 Critical 9.2 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data 0.7%
• CVE-2026-78370 Critical 9.2 RansomLook Unauthenticated Database Export Exposes Private Data 0.7%
• CVE-2026-78369 High 8.8 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook 0.7%
• CVE-2026-40584 Medium 6.9 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure 0.3%