Vulnerabilidades em lookyloo
8 resultadosAnálise Vexday
Lookyloo apresenta uma base reduzida com apenas 2 CVEs catalogadas, ambas publicadas recentemente (últimos 90 dias), incluindo 1 vulnerabilidade crítica. Nenhuma das falhas está sendo explorada ativamente em campo, indicando baixo risco operacional imediato. A fraqueza dominante (CWE-400 - Controle Inadequado de Recursos) sugere problemas potenciais de resiliência, mas o volume limitado de exposições reflete um perfil de risco contido.
CVE-2025-65095CRITICALLookyloo is vulnerable due to improper user input sanitizationEPSS 0.4%CVE-2026-44439MEDIUMLookyLoo - PlaywrightCapture permits access to local files and internal network resources during page captureEPSS 0.3%CVE-2025-66459MEDIUMLookyloo vulnerable to XSS due to unescaped error message passed to innerHTMLEPSS 0.3%CVE-2026-63175HIGHCross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCaptureEPSS 0.3%CVE-2026-66824CRITICALStored Cross-Site Scripting via Unsafe Capture Tree JSON EmbeddingEPSS 0.3%CVE-2026-66913MEDIUMZip Bomb in Lookyloo Capture Upload Allows Denial of ServiceEPSS 0.3%CVE-2025-66458MEDIUMLookyloo has multiple XSS due to unsafe use of f-strings in MarkupEPSS 0.2%CVE-2025-66460MEDIUMLookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to DatatablesEPSS 0.2%