<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities of Lookyloo</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Vulnerabilities published under the CPE names of Lookyloo.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 20 Sep 2026 08:06:50 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-66913</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-66913</link>
      <description>Zip Bomb in Lookyloo Capture Upload Allows Denial of Service</description>
      <content:encoded>Zip Bomb in Lookyloo Capture Upload Allows Denial of Service</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-66913</guid>
      <pubDate>Tue, 28 Jul 2026 12:19:20 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-66824</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-66824</link>
      <description>Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding</description>
      <content:encoded>Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-66824</guid>
      <pubDate>Mon, 27 Jul 2026 19:58:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-66459</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-66459</link>
      <description>Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML</description>
      <content:encoded>Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-66459</guid>
      <pubDate>Tue, 02 Dec 2025 18:32:59 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-66458</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-66458</link>
      <description>Lookyloo has multiple XSS due to unsafe use of f-strings in Markup</description>
      <content:encoded>Lookyloo has multiple XSS due to unsafe use of f-strings in Markup</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-66458</guid>
      <pubDate>Tue, 02 Dec 2025 18:30:56 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-66460</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-66460</link>
      <description>Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables</description>
      <content:encoded>Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-66460</guid>
      <pubDate>Tue, 02 Dec 2025 18:34:45 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-65095</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-65095</link>
      <description>Lookyloo is vulnerable due to improper user input sanitization</description>
      <content:encoded>Lookyloo is vulnerable due to improper user input sanitization</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-65095</guid>
      <pubDate>Wed, 19 Nov 2025 17:38:55 +0000</pubDate>
    </item>
  </channel>
</rss>
