LLookyloo

Products

Exploited and recent CVEs

• CVE-2026-55835 Medium 6.9 Lookyloo: Potential sub-system DoS due to parameter missmatch in notification 0.4%
• CVE-2026-85242 Medium 6.9 Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture 0.4%
• CVE-2026-73210 Medium 5.1 Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture 0.5%
• CVE-2026-66913 Medium 6.9 Zip Bomb in Lookyloo Capture Upload Allows Denial of Service 0.4%
• CVE-2026-66824 Critical 9.2 Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding 0.4%
• CVE-2026-63175 High 7.1 Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture 0.5%
• CVE-2026-44439 Medium 6.6 LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture 0.4%
• CVE-2025-66460 Medium 5.3 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables 0.2%
• CVE-2025-66459 Medium 5.3 Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML 0.3%
• CVE-2025-66458 Medium 5.3 Lookyloo has multiple XSS due to unsafe use of f-strings in Markup 0.2%
• CVE-2025-65095 Critical 9.4 Lookyloo is vulnerable due to improper user input sanitization 0.4%