Fafner [_KeyZee_]

RansomLook API Key Disclosure Through /admin/apikeys HTML Source

Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

RansomLook Arbitrary File Read via Path Traversal in Post screen Field

Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data