Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

RansomLook — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in RansomLook, with AI-generated Chinese analysis, references, and POCs.

RansomLook is a specialized database product focusing on ransomware-related vulnerabilities and incident tracking. This page aggregates data concerning security flaws that facilitate or result from ransomware attacks, covering events and disclosures from 2020 through the present. It serves as a centralized resource for security professionals to analyze the evolving landscape of ransomware threats. Here, you can track specific vendor advisories related to exploitable weaknesses that cybercriminal groups frequently leverage. You can also understand the mechanics of specific weakness classes often targeted by ransomware affiliates. Furthermore, the platform allows users to look up a product’s historical vulnerability record to assess its exposure to ransomware-specific attacks. The collected data includes metadata from public announcements, threat intelligence reports, and verified incident records. By organizing this information chronologically and categorically, the page provides clarity on which software components are most at risk. It bridges the gap between generic vulnerability databases and operational security contexts relevant to ransomware defense. The content is curated to help analysts identify patterns in attacker behavior and prioritize patching efforts. This structured approach ensures that teams can quickly grasp the implications of a given CVE in a ransomware context. The database is continuously updated to reflect new incidents and vendor responses. It aims to support proactive risk management by highlighting trends in exploit availability and malware evolution. Users benefit from a consolidated view of how vulnerabilities translate into actual extortion events.

Vendor: RansomLook

CVE ID Title CVSS Severity Published
CVE-2026-78555 RansomLook API Key Disclosure Through /admin/apikeys HTML Source CWE-522 9.4 Critical 2026-08-24
CVE-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook CWE-276 7.0 High 2026-08-24
CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts CWE-307 8.8 High 2026-08-24
CVE-2026-78391 Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook CWE-79 8.8 High 2026-08-24
CVE-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification CWE-862 9.4 Critical 2026-08-24
CVE-2026-78386 Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API CWE-200 8.7 High 2026-08-24
CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access CWE-918 8.2 High 2026-08-24
CVE-2026-78381 RansomLook Arbitrary File Read via Path Traversal in Post screen Field CWE-22 8.2 High 2026-08-24
CVE-2026-78380 Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook CWE-862 8.7 High 2026-08-24
CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data CWE-200 6.9 Medium 2026-08-24
CVE-2026-78372 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data CWE-862 9.2 Critical 2026-08-24
CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data CWE-862 9.2 Critical 2026-08-24
CVE-2026-78369 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook CWE-306 8.8 High 2026-08-24
CVE-2026-40584 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure CWE-200 5.3AI Medium AI 2026-04-21

All 14 known CVE vulnerabilities affecting RansomLook with full Chinese analysis, references, and POCs where available.