Approved changes feed: RSS · Atom

cpe:2.3:a:ransomlook:ransomlook:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRansomlook (2ba086ea-6b56-5b8b-a95e-19e0f1de5f2e)
ProductRansomlook (ffd8120e-90c7-557c-aa63-6af85325ac2e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ransomlook/ransomlook purl2cpe 2026-06-01 10:11:27.419713

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40584 vulnerable 2026-06-08 08:01:20.855293 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure
RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries marked as private may be unintentionally retained in API responses, allowing unauthorized disclosure of non-public location information. This vulnerability is fixed in 1.9.0.
Published: 2026-04-21T17:05:25.349Z
Updated: 2026-04-21T17:29:55.759Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.