Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

RansomLook — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting RansomLook. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security advisories and vulnerability reports specifically for the RansomLook vendor, focusing on ransomware-related weaknesses and tagging them for easy identification. The collection encompasses a comprehensive range of security flaws discovered in RansomLook products and services, covering incidents reported from the organization's inception through the current year. Visitors can utilize this resource to track the vendor's official security advisories over time, understand the specific characteristics and impact of ransomware vulnerability classes, or look up the complete historical record of security issues affecting any particular RansomLook product line. The data presented here is compiled from public disclosures, vendor bulletins, and security researcher findings, offering a centralized view of the threat landscape associated with this specific entity. By analyzing the trends in reported issues, security professionals and administrators can better assess the evolving risk profile of RansomLook solutions and implement appropriate defensive measures. This archive serves as a factual reference for incident response teams, auditors, and researchers who require detailed information about past and present security gaps without relying on fragmented sources or marketing materials.

Top products by RansomLook: RansomLook
CVE ID Title CVSS Severity Published
CVE-2026-78555 RansomLook API Key Disclosure Through /admin/apikeys HTML Source — ransomlook CWE-522 9.4 Critical 2026-08-24
CVE-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook — ransomlook CWE-276 7.0 High 2026-08-24
CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts — ransomlook CWE-307 8.8 High 2026-08-24
CVE-2026-78391 Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook — ransomlook CWE-79 8.8 High 2026-08-24
CVE-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification — ransomlook CWE-862 9.4 Critical 2026-08-24
CVE-2026-78386 Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API — ransomlook CWE-200 8.7 High 2026-08-24
CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access — ransomlook CWE-918 8.2 High 2026-08-24
CVE-2026-78381 RansomLook Arbitrary File Read via Path Traversal in Post screen Field — ransomlook CWE-22 8.2 High 2026-08-24
CVE-2026-78380 Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook — ransomlook CWE-862 8.7 High 2026-08-24
CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data — ransomlook CWE-200 6.9 Medium 2026-08-24
CVE-2026-78372 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data — ransomlook CWE-862 9.2 Critical 2026-08-24
CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data — ransomlook CWE-862 9.2 Critical 2026-08-24
CVE-2026-78369 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook — ransomlook CWE-306 8.8 High 2026-08-24
CVE-2026-40584 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure — RansomLook CWE-200 5.3AI Medium AI 2026-04-21

This page lists every published CVE security advisory associated with RansomLook. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.