Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/12/03 7:05 p.m.•27 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS6.7AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/02 7:15 p.m.•26 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS0.00188EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/02 6:34 p.m.•13 views

EUVD-2025-200310

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS6.2AI score0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/02 6:34 p.m.•14 views

CVE-2025-66460 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS6.6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•16 views

PT-2025-48753

Name of the Vulnerable Software and Affected Versions Lookyloo versions prior to 1.35.3 Description Lookyloo is a web interface used to capture and display a tree of domains that interact with each other. Versions of Lookyloo prior to 1.35.3 improperly escape values passed to cells rendered in...

6.1CVSS6.7AI score0.00188EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•1 views

CVE-2025-66460: Improper Neutralization of Input During Web Page Generation

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS5.8AI score0.00188EPSS
SaveExploits0References4
Rows per page
Query Builder