Vulnerabilities in Lookyloo
8 resultsVexday analysis
Lookyloo apresenta um perfil de risco moderado com 6 vulnerabilidades catalogadas, sendo 1 crítica e 2 publicadas recentemente, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é CWE-79 (Cross-site Scripting), indicando vulnerabilidades de injeção que, embora não estejam sendo exploradas no momento, demandam atenção em ciclos de atualização de segurança.
CVE-2025-65095CRITICALLookyloo is vulnerable due to improper user input sanitizationEPSS 0.4%CVE-2026-44439MEDIUMLookyLoo - PlaywrightCapture permits access to local files and internal network resources during page captureEPSS 0.3%CVE-2025-66459MEDIUMLookyloo vulnerable to XSS due to unescaped error message passed to innerHTMLEPSS 0.3%CVE-2026-63175HIGHCross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCaptureEPSS 0.3%CVE-2026-66824CRITICALStored Cross-Site Scripting via Unsafe Capture Tree JSON EmbeddingEPSS 0.3%CVE-2026-66913MEDIUMZip Bomb in Lookyloo Capture Upload Allows Denial of ServiceEPSS 0.3%CVE-2025-66458MEDIUMLookyloo has multiple XSS due to unsafe use of f-strings in MarkupEPSS 0.2%CVE-2025-66460MEDIUMLookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to DatatablesEPSS 0.2%