Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/12/03 7:05 p.m.•27 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/02 7:15 p.m.•27 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/02 6:34 p.m.•16 views

CVE-2025-66460 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/12/02 6:34 p.m.•15 views

EUVD-2025-200310

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•2 views

CVE-2025-66460: Improper Neutralization of Input During Web Page Generation

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS5.8AI score0.00188EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•18 views

PT-2025-48753

Name of the Vulnerable Software and Affected Versions Lookyloo versions prior to 1.35.3 Description Lookyloo is a web interface used to capture and display a tree of domains that interact with each other. Versions of Lookyloo prior to 1.35.3 improperly escape values passed to cells rendered in...

6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References8
Rows per page
Query Builder