<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ransomlook</title><description>Every new CVE for ransomlook.</description><link>https://agentprime.io/</link><item><title>CVE-2026-78555: RansomLook API Key Disclosure Through /admin/apikeys HTML Source</title><link>https://agentprime.io/advisories/CVE-2026-78555/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78555/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 19:38:50 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-78553: Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook</title><link>https://agentprime.io/advisories/CVE-2026-78553/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78553/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 19:28:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78551: RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts</title><link>https://agentprime.io/advisories/CVE-2026-78551/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78551/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 19:20:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78391: Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook</title><link>https://agentprime.io/advisories/CVE-2026-78391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78391/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 14:13:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78387: RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification</title><link>https://agentprime.io/advisories/CVE-2026-78387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78387/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 14:04:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-78386: Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API</title><link>https://agentprime.io/advisories/CVE-2026-78386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78386/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:55:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78385: RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access</title><link>https://agentprime.io/advisories/CVE-2026-78385/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78385/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:49:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78381: RansomLook Arbitrary File Read via Path Traversal in Post screen Field</title><link>https://agentprime.io/advisories/CVE-2026-78381/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78381/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:32:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78380: Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook</title><link>https://agentprime.io/advisories/CVE-2026-78380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78380/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:26:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78378: Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data</title><link>https://agentprime.io/advisories/CVE-2026-78378/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78378/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:19:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-78372: RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data</title><link>https://agentprime.io/advisories/CVE-2026-78372/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78372/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:09:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-78370: RansomLook Unauthenticated Database Export Exposes Private Data</title><link>https://agentprime.io/advisories/CVE-2026-78370/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78370/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 13:03:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-78369: Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook</title><link>https://agentprime.io/advisories/CVE-2026-78369/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-78369/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 12:58:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40584: RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure</title><link>https://agentprime.io/advisories/CVE-2026-40584/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40584/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Apr 2026 17:05:25 GMT</pubDate><category>CVE</category></item></channel></rss>