Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/24 2:17 p.m.13 views

CVE-2026-78378

Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...

6.9CVSS0.00279EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 1:19 p.m.25 views

CVE-2026-78378

Ransomlook is affected by a Redis glob pattern injection vulnerability. The root cause is insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint falls back to using the attacker-supplied value directly in a Redis ke...

6.9CVSS5.4AI score0.00279EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 1:19 p.m.35 views

CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...

6.9CVSS0.00279EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/24 1:19 p.m.25 views

CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data

Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...

6.9CVSS5.6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 1:19 p.m.12 views

EUVD-2026-64856

Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...

6.9CVSS5.5AI score0.00279EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2017/06/06 12:00 a.m.22 views

PT-2017-18938

Name of the Vulnerable Software and Affected Versions YARA version 3.6.1 Description The issue allows remote attackers to cause a denial of service or obtain sensitive information from process memory via a crafted file. This is due to the mishandling of the file in the yr re fast exec function in...

9.1CVSS6.9AI score0.02996EPSS
SaveExploits12References27
Rows per page
Query Builder