Fafner [_KeyZee_]

RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook API Key Disclosure Through /admin/apikeys HTML Source

Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

RansomLook Unauthenticated Database Export Exposes Private Data

RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data

Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

RansomLook Arbitrary File Read via Path Traversal in Post screen Field

RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access