Vendor
ransomlook
14 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.9
Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/<name> endpoint attempted to resolve the supplied name to…
-
Medium 6.9
RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure
RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a…