ransomlook.

RansomLook API Key Disclosure Through /admin/apikeys HTML Source

• ransomlook
• Information disclosure
• Hard-coded credentials

Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

• ransomlook
• Broken access control

RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

• ransomlook
• Authentication bypass
• Denial of service

Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

• ransomlook
• Cross-site scripting (XSS)

RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

• ransomlook
• Broken access control

Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

• ransomlook
• Information disclosure

RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

• ransomlook
• Server-side request forgery (SSRF)

RansomLook Arbitrary File Read via Path Traversal in Post screen Field

• ransomlook
• Path traversal

Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

• ransomlook
• Broken access control

Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

• ransomlook
• Information disclosure

RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data

• ransomlook
• Broken access control

RansomLook Unauthenticated Database Export Exposes Private Data

• ransomlook
• Broken access control

Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

• ransomlook
• Authentication bypass

RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure

• RansomLook
• Information disclosure