https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 25 Aug 2026 16:40:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-16599 Denial of Service in GNU wget Denial of Service in GNU wget https://vulnerability.circl.lu/vuln/cve-2026-16599 Tue, 25 Aug 2026 14:17:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78555 RansomLook API Key Disclosure Through /admin/apikeys HTML Source RansomLook API Key Disclosure Through /admin/apikeys HTML Source https://vulnerability.circl.lu/vuln/cve-2026-78555 Mon, 24 Aug 2026 19:38:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook https://vulnerability.circl.lu/vuln/cve-2026-78553 Mon, 24 Aug 2026 19:28:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts https://vulnerability.circl.lu/vuln/cve-2026-78551 Mon, 24 Aug 2026 19:20:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78391 Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook https://vulnerability.circl.lu/vuln/cve-2026-78391 Mon, 24 Aug 2026 14:13:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification https://vulnerability.circl.lu/vuln/cve-2026-78387 Mon, 24 Aug 2026 14:04:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78386 Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API https://vulnerability.circl.lu/vuln/cve-2026-78386 Mon, 24 Aug 2026 13:55:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access https://vulnerability.circl.lu/vuln/cve-2026-78385 Mon, 24 Aug 2026 13:49:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78381 RansomLook Arbitrary File Read via Path Traversal in Post screen Field RansomLook Arbitrary File Read via Path Traversal in Post screen Field https://vulnerability.circl.lu/vuln/cve-2026-78381 Mon, 24 Aug 2026 13:32:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78380 Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook https://vulnerability.circl.lu/vuln/cve-2026-78380 Mon, 24 Aug 2026 13:26:56 +0000