4 matches found
CVE-2026-55835
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...
CVE-2026-55835 Lookyloo: Potential sub-system DoS due to parameter missmatch in notification
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...
CVE-2026-55835
The Lookyloo web interface (prior to version 1.39.4 ) is vulnerable to a potential Denial of Service (DoS) on a connected MISP instance . The root cause is a parameter mismatch in the /json//report API endpoint (CaptureReport ), where the email and comment parameters incorrectly overwrite the as_...
EUVD-2026-108582
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...