Lucene search
+L

6 matches found

Elastic
Elastic
•added 2026/08/13 10:48 a.m.•16 views

Kibana 8.19.20, and 9.4.4 Security Update (ESA-2026-90)

Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations Description: Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1...

5.4CVSS5.5AI score0.00309EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/06/05 7:27 p.m.•17 views

CVE-2026-40584

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

7.5CVSS5.5AI score0.00444EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/21 5:05 p.m.•37 views

CVE-2026-40584

CVE-2026-40584 affects RansomLook. The vulnerability arises in the API at website/web/api/genericapi.py prior to version 1.9.0, where entries marked private are not properly filtered due to removing elements from a list while iterating. This can cause private location entries to be unintentionall...

7.5CVSS5.8AI score0.00444EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/04/21 5:05 p.m.•12 views

CVE-2026-40584

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

6.9CVSS5.8AI score0.00444EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/04/21 5:05 p.m.•14 views

CVE-2026-40584 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

6.9CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•0 views

CVE-2026-40584: Exposure of Sensitive Information to an Unauthorized Actor

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

7.5CVSS5.8AI score0.00444EPSS
SaveExploits0References4
Rows per page
Query Builder