[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-78555":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-24T16:49:05.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":1520,"aliases":1521,"duplicate_of":9,"upstream":1522,"downstream":1523,"duplicates":1524,"related":1525,"reserved_at":9,"published_at":1526,"modified_at":1527,"state":1528,"summary":1529,"references_raw":1536,"kevs":1542,"epss":9,"epss_history":1543,"metrics":1544,"affected":1548},"CVE-2026-78555","RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key, the full token was embedded in hidden form fields used by the enable/disable, private-access, and delete actions.\n\n\nAs a result, API credentials could be recovered by inspecting the page source or DOM. The credentials could also be unintentionally exposed through components that retain or inspect HTTP response bodies, such as debugging proxies, browser caches, monitoring systems, or other intermediaries. An attacker obtaining one of these tokens could subsequently authenticate using the privileges assigned to that key, including access to private data where the key was granted such permissions.\n\n\nThe patch removes API keys from subsequent page rendering and replaces them with SHA-256-derived opaque handles. Administrative actions submit only these handles, which are resolved back to the corresponding token on the server. The full API key is therefore disclosed only once, when it is initially created.",null,[11,588],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","weakness","Incomplete","Class",[19,23,77,81,156,232,313,367,397,438,497,532,584],{"id":20,"name":21,"techniques":22},"CAPEC-102","Session Sidejacking",[],{"id":24,"name":25,"techniques":26},"CAPEC-474","Signature Spoofing by Key Theft",[27],{"id":28,"name":29,"tactics":30,"countermeasures":34},"T1552.004","Private Keys",[31],{"id":32,"name":33},"TA0031","Credential Access",[35,40,45,50,55,60,65,69,73],{"id":36,"name":37,"tactic":38},"D3-CTS","Credential Transmission Scoping",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-CH","Credential Hardening",{"name":44},"Harden",{"id":46,"name":47,"tactic":48},"D3-RIC","Reissue Credential",{"name":49},"Restore",{"id":51,"name":52,"tactic":53},"D3-DUC","Decoy User Credential",{"name":54},"Deceive",{"id":56,"name":57,"tactic":58},"D3-CR","Credential Revocation",{"name":59},"Evict",{"id":61,"name":62,"tactic":63},"D3-CCSA","Credential Compromise Scope Analysis",{"name":64},"Detect",{"id":66,"name":67,"tactic":68},"D3-MFA","Multi-factor Authentication",{"name":44},{"id":70,"name":71,"tactic":72},"D3-CRO","Credential Rotation",{"name":44},{"id":74,"name":75,"tactic":76},"D3-ANCI","Authentication Cache Invalidation",{"name":59},{"id":78,"name":79,"techniques":80},"CAPEC-50","Password Recovery Exploitation",[],{"id":82,"name":83,"techniques":84},"CAPEC-509","Kerberoasting",[85],{"id":86,"name":83,"tactics":87,"countermeasures":89},"T1558.003",[88],{"id":32,"name":33},[90,92,94,96,98,102,106,110,114,118,122,126,130,134,136,138,142,146,148,150,152],{"id":61,"name":62,"tactic":91},{"name":64},{"id":56,"name":57,"tactic":93},{"name":59},{"id":74,"name":75,"tactic":95},{"name":59},{"id":51,"name":52,"tactic":97},{"name":54},{"id":99,"name":100,"tactic":101},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":103,"name":104,"tactic":105},"D3-RTA","RPC Traffic Analysis",{"name":64},{"id":107,"name":108,"tactic":109},"D3-TBA","Token-based Authentication",{"name":44},{"id":111,"name":112,"tactic":113},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":64},{"id":115,"name":116,"tactic":117},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":64},{"id":119,"name":120,"tactic":121},"D3-CSPP","Client-server Payload Profiling",{"name":64},{"id":123,"name":124,"tactic":125},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":64},{"id":127,"name":128,"tactic":129},"D3-NTSA","Network Traffic Signature Analysis",{"name":64},{"id":131,"name":132,"tactic":133},"D3-APCA","Application Protocol Command Analysis",{"name":64},{"id":41,"name":42,"tactic":135},{"name":44},{"id":46,"name":47,"tactic":137},{"name":49},{"id":139,"name":140,"tactic":141},"D3-NTCD","Network Traffic Community Deviation",{"name":64},{"id":143,"name":144,"tactic":145},"D3-RTSD","Remote Terminal Session Detection",{"name":64},{"id":66,"name":67,"tactic":147},{"name":44},{"id":36,"name":37,"tactic":149},{"name":39},{"id":70,"name":71,"tactic":151},{"name":44},{"id":153,"name":154,"tactic":155},"D3-TB","Token Binding",{"name":44},{"id":157,"name":158,"techniques":159},"CAPEC-551","Modify Existing Service",[160],{"id":161,"name":162,"tactics":163,"countermeasures":170},"T1543","Create or Modify System Process",[164,167],{"id":165,"name":166},"TA0110","Persistence",{"id":168,"name":169},"TA0111","Privilege Escalation",[171,175,179,183,188,192,196,200,204,208,212,216,220,224,228],{"id":172,"name":173,"tactic":174},"D3-SFA","System File Analysis",{"name":64},{"id":176,"name":177,"tactic":178},"D3-FEV","File Eviction",{"name":59},{"id":180,"name":181,"tactic":182},"D3-FE","File Encryption",{"name":44},{"id":184,"name":185,"tactic":186},"D3-DI","Data Inventory",{"name":187},"Model",{"id":189,"name":190,"tactic":191},"D3-CF","Content Filtering",{"name":39},{"id":193,"name":194,"tactic":195},"D3-LFP","Local File Permissions",{"name":39},{"id":197,"name":198,"tactic":199},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":201,"name":202,"tactic":203},"D3-CQ","Content Quarantine",{"name":39},{"id":205,"name":206,"tactic":207},"D3-CM","Content Modification",{"name":39},{"id":209,"name":210,"tactic":211},"D3-RF","Restore File",{"name":49},{"id":213,"name":214,"tactic":215},"D3-FA","File Analysis",{"name":64},{"id":217,"name":218,"tactic":219},"D3-FIM","File Integrity Monitoring",{"name":64},{"id":221,"name":222,"tactic":223},"D3-SCP","System Configuration Permissions",{"name":44},{"id":225,"name":226,"tactic":227},"D3-DF","Decoy File",{"name":54},{"id":229,"name":230,"tactic":231},"D3-RD","Restore Database",{"name":49},{"id":233,"name":234,"techniques":235},"CAPEC-555","Remote Services with Stolen Credentials",[236,270,302],{"id":237,"name":238,"tactics":239,"countermeasures":243},"T1021","Remote Services",[240],{"id":241,"name":242},"TA0109","Lateral Movement",[244,246,248,250,252,254,256,258,262,264,266],{"id":111,"name":112,"tactic":245},{"name":64},{"id":131,"name":132,"tactic":247},{"name":64},{"id":139,"name":140,"tactic":249},{"name":64},{"id":115,"name":116,"tactic":251},{"name":64},{"id":143,"name":144,"tactic":253},{"name":64},{"id":119,"name":120,"tactic":255},{"name":64},{"id":99,"name":100,"tactic":257},{"name":39},{"id":259,"name":260,"tactic":261},"D3-CAA","Connection Attempt Analysis",{"name":64},{"id":123,"name":124,"tactic":263},{"name":64},{"id":127,"name":128,"tactic":265},{"name":64},{"id":267,"name":268,"tactic":269},"D3-ST","Session Termination",{"name":59},{"id":271,"name":272,"tactics":273,"countermeasures":277},"T1114.002","Remote Email Collection",[274],{"id":275,"name":276},"TA0100","Collection",[278,282,286,290,294,298],{"id":279,"name":280,"tactic":281},"D3-EHB","Endpoint Health Beacon",{"name":64},{"id":283,"name":284,"tactic":285},"D3-LLM","Logical Link Mapping",{"name":187},{"id":287,"name":288,"tactic":289},"D3-NNI","Network Node Inventory",{"name":187},{"id":291,"name":292,"tactic":293},"D3-PLM","Physical Link Mapping",{"name":187},{"id":295,"name":296,"tactic":297},"D3-ER","Email Removal",{"name":59},{"id":299,"name":300,"tactic":301},"D3-RNA","Restore Network Access",{"name":49},{"id":303,"name":304,"tactics":305,"countermeasures":310},"T1133","External Remote Services",[306,307],{"id":165,"name":166},{"id":308,"name":309},"TA0108","Initial Access",[311],{"id":267,"name":268,"tactic":312},{"name":59},{"id":314,"name":315,"techniques":316},"CAPEC-560","Use of Known Domain Credentials",[317],{"id":318,"name":319,"tactics":320,"countermeasures":330},"T1078","Valid Accounts",[321,324,327,328,329],{"id":322,"name":323},"TA0030","Defense Evasion",{"id":325,"name":326},"TA0005","Stealth",{"id":165,"name":166},{"id":168,"name":169},{"id":308,"name":309},[331,335,339,343,347,351,355,359,363],{"id":332,"name":333,"tactic":334},"D3-ULA","Unlock Account",{"name":49},{"id":336,"name":337,"tactic":338},"D3-AM","Access Modeling",{"name":187},{"id":340,"name":341,"tactic":342},"D3-RUAA","Restore User Account Access",{"name":49},{"id":344,"name":345,"tactic":346},"D3-LAM","Local Account Monitoring",{"name":64},{"id":348,"name":349,"tactic":350},"D3-AL","Account Locking",{"name":59},{"id":352,"name":353,"tactic":354},"D3-UAP","User Account Permissions",{"name":39},{"id":356,"name":357,"tactic":358},"D3-AA","Agent Authentication",{"name":44},{"id":360,"name":361,"tactic":362},"D3-CDP","Change Default Password",{"name":44},{"id":364,"name":365,"tactic":366},"D3-DAM","Domain Account Monitoring",{"name":64},{"id":368,"name":369,"techniques":370},"CAPEC-561","Windows Admin Shares with Stolen Credentials",[371],{"id":372,"name":373,"tactics":374,"countermeasures":376},"T1021.002","SMB/Windows Admin Shares",[375],{"id":241,"name":242},[377,379,381,383,385,387,389,391,393,395],{"id":123,"name":124,"tactic":378},{"name":64},{"id":111,"name":112,"tactic":380},{"name":64},{"id":139,"name":140,"tactic":382},{"name":64},{"id":119,"name":120,"tactic":384},{"name":64},{"id":127,"name":128,"tactic":386},{"name":64},{"id":143,"name":144,"tactic":388},{"name":64},{"id":259,"name":260,"tactic":390},{"name":64},{"id":115,"name":116,"tactic":392},{"name":64},{"id":131,"name":132,"tactic":394},{"name":64},{"id":99,"name":100,"tactic":396},{"name":39},{"id":398,"name":399,"techniques":400},"CAPEC-600","Credential Stuffing",[401],{"id":402,"name":399,"tactics":403,"countermeasures":405},"T1110.004",[404],{"id":32,"name":33},[406,408,410,412,414,416,418,422,424,426,430,432,434],{"id":99,"name":100,"tactic":407},{"name":39},{"id":119,"name":120,"tactic":409},{"name":64},{"id":139,"name":140,"tactic":411},{"name":64},{"id":123,"name":124,"tactic":413},{"name":64},{"id":127,"name":128,"tactic":415},{"name":64},{"id":115,"name":116,"tactic":417},{"name":64},{"id":419,"name":420,"tactic":421},"D3-OPM","Operational Process Monitoring",{"name":64},{"id":259,"name":260,"tactic":423},{"name":64},{"id":143,"name":144,"tactic":425},{"name":64},{"id":427,"name":428,"tactic":429},"D3-AEM","Application Exception Monitoring",{"name":64},{"id":111,"name":112,"tactic":431},{"name":64},{"id":131,"name":132,"tactic":433},{"name":64},{"id":435,"name":436,"tactic":437},"D3-ANAA","Administrative Network Activity Analysis",{"name":64},{"id":439,"name":440,"techniques":441},"CAPEC-644","Use of Captured Hashes (Pass The Hash)",[442],{"id":443,"name":444,"tactics":445,"countermeasures":448},"T1550.002","Pass the Hash",[446,447],{"id":322,"name":323},{"id":241,"name":242},[449,453,457,461,465,469,473,477,481,485,489,493],{"id":450,"name":451,"tactic":452},"D3-PT","Process Termination",{"name":59},{"id":454,"name":455,"tactic":456},"D3-PS","Process Suspension",{"name":59},{"id":458,"name":459,"tactic":460},"D3-HR","Host Reboot",{"name":59},{"id":462,"name":463,"tactic":464},"D3-PLA","Process Lineage Analysis",{"name":64},{"id":466,"name":467,"tactic":468},"D3-PSMD","Process Self-Modification Detection",{"name":64},{"id":470,"name":471,"tactic":472},"D3-HS","Host Shutdown",{"name":59},{"id":474,"name":475,"tactic":476},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":478,"name":479,"tactic":480},"D3-SCF","System Call Filtering",{"name":39},{"id":482,"name":483,"tactic":484},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":486,"name":487,"tactic":488},"D3-PSA","Process Spawn Analysis",{"name":64},{"id":490,"name":491,"tactic":492},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":494,"name":495,"tactic":496},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":498,"name":499,"techniques":500},"CAPEC-645","Use of Captured Tickets (Pass The Ticket)",[501],{"id":502,"name":503,"tactics":504,"countermeasures":507},"T1550.003","Pass the Ticket",[505,506],{"id":322,"name":323},{"id":241,"name":242},[508,510,512,514,516,518,520,522,524,526,528,530],{"id":482,"name":483,"tactic":509},{"name":39},{"id":454,"name":455,"tactic":511},{"name":59},{"id":490,"name":491,"tactic":513},{"name":39},{"id":458,"name":459,"tactic":515},{"name":59},{"id":494,"name":495,"tactic":517},{"name":39},{"id":486,"name":487,"tactic":519},{"name":64},{"id":470,"name":471,"tactic":521},{"name":59},{"id":474,"name":475,"tactic":523},{"name":39},{"id":462,"name":463,"tactic":525},{"name":64},{"id":450,"name":451,"tactic":527},{"name":59},{"id":466,"name":467,"tactic":529},{"name":64},{"id":478,"name":479,"tactic":531},{"name":39},{"id":533,"name":534,"techniques":535},"CAPEC-652","Use of Known Kerberos Credentials",[536],{"id":537,"name":538,"tactics":539,"countermeasures":541},"T1558","Steal or Forge Kerberos Tickets",[540],{"id":32,"name":33},[542,544,546,548,550,552,554,556,558,560,562,564,566,568,570,572,574,576,578,580,582],{"id":153,"name":154,"tactic":543},{"name":44},{"id":56,"name":57,"tactic":545},{"name":59},{"id":74,"name":75,"tactic":547},{"name":59},{"id":46,"name":47,"tactic":549},{"name":49},{"id":51,"name":52,"tactic":551},{"name":54},{"id":103,"name":104,"tactic":553},{"name":64},{"id":41,"name":42,"tactic":555},{"name":44},{"id":111,"name":112,"tactic":557},{"name":64},{"id":115,"name":116,"tactic":559},{"name":64},{"id":119,"name":120,"tactic":561},{"name":64},{"id":123,"name":124,"tactic":563},{"name":64},{"id":127,"name":128,"tactic":565},{"name":64},{"id":131,"name":132,"tactic":567},{"name":64},{"id":139,"name":140,"tactic":569},{"name":64},{"id":143,"name":144,"tactic":571},{"name":64},{"id":107,"name":108,"tactic":573},{"name":44},{"id":36,"name":37,"tactic":575},{"name":39},{"id":61,"name":62,"tactic":577},{"name":64},{"id":66,"name":67,"tactic":579},{"name":44},{"id":70,"name":71,"tactic":581},{"name":44},{"id":99,"name":100,"tactic":583},{"name":39},{"id":585,"name":586,"techniques":587},"CAPEC-653","Use of Known Operating System Credentials",[],{"_key":589,"id":589,"name":590,"description":591,"type":15,"status":592,"abstraction":17,"likelihood_of_exploit":593,"capec":594},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","Draft","High",[595,599,744,770,774,778,782,786,790,794,860,864,868,890,894,898,902,906,916,920,924,928,932,936,940,944,948,1012,1016,1042,1064,1068,1072,1076,1080,1084,1088,1092,1096,1100,1104,1108,1112,1116,1120,1124,1156,1160,1182,1204,1232,1258,1336,1340,1441,1478,1488,1498,1516],{"id":596,"name":597,"techniques":598},"CAPEC-116","Excavation",[],{"id":600,"name":601,"techniques":602},"CAPEC-13","Subverting Environment Variable Values",[603,668,704],{"id":604,"name":605,"tactics":606,"countermeasures":609},"T1562.003","Impair Command History Logging",[607,608],{"id":322,"name":323},{"id":325,"name":326},[610,614,616,618,622,624,628,632,634,638,642,644,646,648,650,652,656,660,664,666],{"id":611,"name":612,"tactic":613},"D3-EFA","Emulated File Analysis",{"name":64},{"id":225,"name":226,"tactic":615},{"name":54},{"id":205,"name":206,"tactic":617},{"name":39},{"id":619,"name":620,"tactic":621},"D3-EAL","Executable Allowlisting",{"name":39},{"id":189,"name":190,"tactic":623},{"name":39},{"id":625,"name":626,"tactic":627},"D3-RKD","Registry Key Deletion",{"name":59},{"id":629,"name":630,"tactic":631},"D3-EDL","Executable Denylisting",{"name":39},{"id":180,"name":181,"tactic":633},{"name":44},{"id":635,"name":636,"tactic":637},"D3-CI","Configuration Inventory",{"name":187},{"id":639,"name":640,"tactic":641},"D3-DRA","Disable Remote Access",{"name":44},{"id":201,"name":202,"tactic":643},{"name":39},{"id":197,"name":198,"tactic":645},{"name":39},{"id":213,"name":214,"tactic":647},{"name":64},{"id":217,"name":218,"tactic":649},{"name":64},{"id":193,"name":194,"tactic":651},{"name":39},{"id":653,"name":654,"tactic":655},"D3-ACH","Application Configuration Hardening",{"name":44},{"id":657,"name":658,"tactic":659},"D3-DA","Dynamic Analysis",{"name":64},{"id":661,"name":662,"tactic":663},"D3-RC","Restore Configuration",{"name":49},{"id":176,"name":177,"tactic":665},{"name":59},{"id":209,"name":210,"tactic":667},{"name":49},{"id":669,"name":670,"tactics":671,"countermeasures":679},"T1574.006","Dynamic Linker Hijacking",[672,673,674,675,676],{"id":165,"name":166},{"id":168,"name":169},{"id":322,"name":323},{"id":325,"name":326},{"id":677,"name":678},"TA0104","Execution",[680,682,684,686,688,690,692,694,696,698,700,702],{"id":217,"name":218,"tactic":681},{"name":64},{"id":205,"name":206,"tactic":683},{"name":39},{"id":180,"name":181,"tactic":685},{"name":44},{"id":176,"name":177,"tactic":687},{"name":59},{"id":225,"name":226,"tactic":689},{"name":54},{"id":209,"name":210,"tactic":691},{"name":49},{"id":172,"name":173,"tactic":693},{"name":64},{"id":189,"name":190,"tactic":695},{"name":39},{"id":193,"name":194,"tactic":697},{"name":39},{"id":197,"name":198,"tactic":699},{"name":39},{"id":213,"name":214,"tactic":701},{"name":64},{"id":201,"name":202,"tactic":703},{"name":39},{"id":705,"name":706,"tactics":707,"countermeasures":713},"T1574.007","Path Interception by PATH Environment Variable",[708,709,710,711,712],{"id":165,"name":166},{"id":168,"name":169},{"id":322,"name":323},{"id":325,"name":326},{"id":677,"name":678},[714,716,718,720,722,724,726,728,730,732,734,736,738,740,742],{"id":611,"name":612,"tactic":715},{"name":64},{"id":225,"name":226,"tactic":717},{"name":54},{"id":209,"name":210,"tactic":719},{"name":49},{"id":180,"name":181,"tactic":721},{"name":44},{"id":213,"name":214,"tactic":723},{"name":64},{"id":657,"name":658,"tactic":725},{"name":64},{"id":189,"name":190,"tactic":727},{"name":39},{"id":193,"name":194,"tactic":729},{"name":39},{"id":217,"name":218,"tactic":731},{"name":64},{"id":197,"name":198,"tactic":733},{"name":39},{"id":201,"name":202,"tactic":735},{"name":39},{"id":205,"name":206,"tactic":737},{"name":39},{"id":619,"name":620,"tactic":739},{"name":39},{"id":629,"name":630,"tactic":741},{"name":39},{"id":176,"name":177,"tactic":743},{"name":59},{"id":745,"name":746,"techniques":747},"CAPEC-169","Footprinting",[748,756,764],{"id":749,"name":750,"tactics":751,"countermeasures":755},"T1217","Browser Information Discovery",[752],{"id":753,"name":754},"TA0102","Discovery",[],{"id":757,"name":758,"tactics":759,"countermeasures":763},"T1592","Gather Victim Host Information",[760],{"id":761,"name":762},"TA0043","Reconnaissance",[],{"id":765,"name":766,"tactics":767,"countermeasures":769},"T1595","Active Scanning",[768],{"id":761,"name":762},[],{"id":771,"name":772,"techniques":773},"CAPEC-22","Exploiting Trust in Client",[],{"id":775,"name":776,"techniques":777},"CAPEC-224","Fingerprinting",[],{"id":779,"name":780,"techniques":781},"CAPEC-285","ICMP Echo Request Ping",[],{"id":783,"name":784,"techniques":785},"CAPEC-287","TCP SYN Scan",[],{"id":787,"name":788,"techniques":789},"CAPEC-290","Enumerate Mail Exchange (MX) Records",[],{"id":791,"name":792,"techniques":793},"CAPEC-291","DNS Zone Transfers",[],{"id":795,"name":796,"techniques":797},"CAPEC-292","Host Discovery",[798],{"id":799,"name":800,"tactics":801,"countermeasures":803},"T1018","Remote System Discovery",[802],{"id":753,"name":754},[804,806,808,810,812,814,816,818,820,822,824,826,830,832,834,836,838,840,842,844,846,848,850,852,854,856,858],{"id":225,"name":226,"tactic":805},{"name":54},{"id":478,"name":479,"tactic":807},{"name":39},{"id":139,"name":140,"tactic":809},{"name":64},{"id":143,"name":144,"tactic":811},{"name":64},{"id":115,"name":116,"tactic":813},{"name":64},{"id":189,"name":190,"tactic":815},{"name":39},{"id":123,"name":124,"tactic":817},{"name":64},{"id":111,"name":112,"tactic":819},{"name":64},{"id":180,"name":181,"tactic":821},{"name":44},{"id":193,"name":194,"tactic":823},{"name":39},{"id":176,"name":177,"tactic":825},{"name":59},{"id":827,"name":828,"tactic":829},"D3-SCA","System Call Analysis",{"name":64},{"id":172,"name":173,"tactic":831},{"name":64},{"id":197,"name":198,"tactic":833},{"name":39},{"id":127,"name":128,"tactic":835},{"name":64},{"id":217,"name":218,"tactic":837},{"name":64},{"id":201,"name":202,"tactic":839},{"name":39},{"id":205,"name":206,"tactic":841},{"name":39},{"id":131,"name":132,"tactic":843},{"name":64},{"id":619,"name":620,"tactic":845},{"name":39},{"id":213,"name":214,"tactic":847},{"name":64},{"id":629,"name":630,"tactic":849},{"name":39},{"id":486,"name":487,"tactic":851},{"name":64},{"id":119,"name":120,"tactic":853},{"name":64},{"id":209,"name":210,"tactic":855},{"name":49},{"id":482,"name":483,"tactic":857},{"name":39},{"id":99,"name":100,"tactic":859},{"name":39},{"id":861,"name":862,"techniques":863},"CAPEC-293","Traceroute Route Enumeration",[],{"id":865,"name":866,"techniques":867},"CAPEC-294","ICMP Address Mask Request",[],{"id":869,"name":870,"techniques":871},"CAPEC-295","Timestamp Request",[872],{"id":873,"name":874,"tactics":875,"countermeasures":877},"T1124","System Time Discovery",[876],{"id":753,"name":754},[878,880,882,884,886,888],{"id":478,"name":479,"tactic":879},{"name":39},{"id":486,"name":487,"tactic":881},{"name":64},{"id":629,"name":630,"tactic":883},{"name":39},{"id":482,"name":483,"tactic":885},{"name":39},{"id":827,"name":828,"tactic":887},{"name":64},{"id":619,"name":620,"tactic":889},{"name":39},{"id":891,"name":892,"techniques":893},"CAPEC-296","ICMP Information Request",[],{"id":895,"name":896,"techniques":897},"CAPEC-297","TCP ACK Ping",[],{"id":899,"name":900,"techniques":901},"CAPEC-298","UDP Ping",[],{"id":903,"name":904,"techniques":905},"CAPEC-299","TCP SYN Ping",[],{"id":907,"name":908,"techniques":909},"CAPEC-300","Port Scanning",[910],{"id":911,"name":912,"tactics":913,"countermeasures":915},"T1046","Network Service Discovery",[914],{"id":753,"name":754},[],{"id":917,"name":918,"techniques":919},"CAPEC-301","TCP Connect Scan",[],{"id":921,"name":922,"techniques":923},"CAPEC-302","TCP FIN Scan",[],{"id":925,"name":926,"techniques":927},"CAPEC-303","TCP Xmas Scan",[],{"id":929,"name":930,"techniques":931},"CAPEC-304","TCP Null Scan",[],{"id":933,"name":934,"techniques":935},"CAPEC-305","TCP ACK Scan",[],{"id":937,"name":938,"techniques":939},"CAPEC-306","TCP Window Scan",[],{"id":941,"name":942,"techniques":943},"CAPEC-307","TCP RPC Scan",[],{"id":945,"name":946,"techniques":947},"CAPEC-308","UDP Scan",[],{"id":949,"name":950,"techniques":951},"CAPEC-309","Network Topology Mapping",[952,996,1006],{"id":953,"name":954,"tactics":955,"countermeasures":957},"T1016","System Network Configuration Discovery",[956],{"id":753,"name":754},[958,960,962,964,966,968,970,972,974,976,978,980,982,984,986,988,990,992,994],{"id":827,"name":828,"tactic":959},{"name":64},{"id":629,"name":630,"tactic":961},{"name":39},{"id":205,"name":206,"tactic":963},{"name":39},{"id":478,"name":479,"tactic":965},{"name":39},{"id":180,"name":181,"tactic":967},{"name":44},{"id":176,"name":177,"tactic":969},{"name":59},{"id":197,"name":198,"tactic":971},{"name":39},{"id":189,"name":190,"tactic":973},{"name":39},{"id":619,"name":620,"tactic":975},{"name":39},{"id":225,"name":226,"tactic":977},{"name":54},{"id":217,"name":218,"tactic":979},{"name":64},{"id":611,"name":612,"tactic":981},{"name":64},{"id":486,"name":487,"tactic":983},{"name":64},{"id":657,"name":658,"tactic":985},{"name":64},{"id":482,"name":483,"tactic":987},{"name":39},{"id":213,"name":214,"tactic":989},{"name":64},{"id":201,"name":202,"tactic":991},{"name":39},{"id":193,"name":194,"tactic":993},{"name":39},{"id":209,"name":210,"tactic":995},{"name":49},{"id":997,"name":998,"tactics":999,"countermeasures":1001},"T1049","System Network Connections Discovery",[1000],{"id":753,"name":754},[1002,1004],{"id":827,"name":828,"tactic":1003},{"name":64},{"id":478,"name":479,"tactic":1005},{"name":39},{"id":1007,"name":1008,"tactics":1009,"countermeasures":1011},"T1590","Gather Victim Network Information",[1010],{"id":761,"name":762},[],{"id":1013,"name":1014,"techniques":1015},"CAPEC-310","Scanning for Vulnerable Software",[],{"id":1017,"name":1018,"techniques":1019},"CAPEC-312","Active OS Fingerprinting",[1020],{"id":1021,"name":1022,"tactics":1023,"countermeasures":1025},"T1082","System Information Discovery",[1024],{"id":753,"name":754},[1026,1028,1032,1034,1036,1038,1040],{"id":482,"name":483,"tactic":1027},{"name":39},{"id":1029,"name":1030,"tactic":1031},"D3-DE","Decoy Environment",{"name":54},{"id":619,"name":620,"tactic":1033},{"name":39},{"id":827,"name":828,"tactic":1035},{"name":64},{"id":478,"name":479,"tactic":1037},{"name":39},{"id":629,"name":630,"tactic":1039},{"name":39},{"id":486,"name":487,"tactic":1041},{"name":64},{"id":1043,"name":1044,"techniques":1045},"CAPEC-313","Passive OS Fingerprinting",[1046],{"id":1021,"name":1022,"tactics":1047,"countermeasures":1049},[1048],{"id":753,"name":754},[1050,1052,1054,1056,1058,1060,1062],{"id":482,"name":483,"tactic":1051},{"name":39},{"id":1029,"name":1030,"tactic":1053},{"name":54},{"id":619,"name":620,"tactic":1055},{"name":39},{"id":827,"name":828,"tactic":1057},{"name":64},{"id":478,"name":479,"tactic":1059},{"name":39},{"id":629,"name":630,"tactic":1061},{"name":39},{"id":486,"name":487,"tactic":1063},{"name":64},{"id":1065,"name":1066,"techniques":1067},"CAPEC-317","IP ID Sequencing Probe",[],{"id":1069,"name":1070,"techniques":1071},"CAPEC-318","IP 'ID' Echoed Byte-Order Probe",[],{"id":1073,"name":1074,"techniques":1075},"CAPEC-319","IP (DF) 'Don't Fragment Bit' Echoing Probe",[],{"id":1077,"name":1078,"techniques":1079},"CAPEC-320","TCP Timestamp Probe",[],{"id":1081,"name":1082,"techniques":1083},"CAPEC-321","TCP Sequence Number Probe",[],{"id":1085,"name":1086,"techniques":1087},"CAPEC-322","TCP (ISN) Greatest Common Divisor Probe",[],{"id":1089,"name":1090,"techniques":1091},"CAPEC-323","TCP (ISN) Counter Rate Probe",[],{"id":1093,"name":1094,"techniques":1095},"CAPEC-324","TCP (ISN) Sequence Predictability Probe",[],{"id":1097,"name":1098,"techniques":1099},"CAPEC-325","TCP Congestion Control Flag (ECN) Probe",[],{"id":1101,"name":1102,"techniques":1103},"CAPEC-326","TCP Initial Window Size Probe",[],{"id":1105,"name":1106,"techniques":1107},"CAPEC-327","TCP Options Probe",[],{"id":1109,"name":1110,"techniques":1111},"CAPEC-328","TCP 'RST' Flag Checksum Probe",[],{"id":1113,"name":1114,"techniques":1115},"CAPEC-329","ICMP Error Message Quoting Probe",[],{"id":1117,"name":1118,"techniques":1119},"CAPEC-330","ICMP Error Message Echoing Integrity Probe",[],{"id":1121,"name":1122,"techniques":1123},"CAPEC-472","Browser Fingerprinting",[],{"id":1125,"name":1126,"techniques":1127},"CAPEC-497","File Discovery",[1128],{"id":1129,"name":1130,"tactics":1131,"countermeasures":1133},"T1083","File and Directory Discovery",[1132],{"id":753,"name":754},[1134,1136,1138,1140,1142,1144,1146,1148,1150,1152,1154],{"id":176,"name":177,"tactic":1135},{"name":59},{"id":197,"name":198,"tactic":1137},{"name":39},{"id":201,"name":202,"tactic":1139},{"name":39},{"id":193,"name":194,"tactic":1141},{"name":39},{"id":205,"name":206,"tactic":1143},{"name":39},{"id":180,"name":181,"tactic":1145},{"name":44},{"id":225,"name":226,"tactic":1147},{"name":54},{"id":189,"name":190,"tactic":1149},{"name":39},{"id":217,"name":218,"tactic":1151},{"name":64},{"id":209,"name":210,"tactic":1153},{"name":49},{"id":213,"name":214,"tactic":1155},{"name":64},{"id":1157,"name":1158,"techniques":1159},"CAPEC-508","Shoulder Surfing",[],{"id":1161,"name":1162,"techniques":1163},"CAPEC-573","Process Footprinting",[1164],{"id":1165,"name":1166,"tactics":1167,"countermeasures":1169},"T1057","Process Discovery",[1168],{"id":753,"name":754},[1170,1172,1174,1176,1178,1180],{"id":619,"name":620,"tactic":1171},{"name":39},{"id":827,"name":828,"tactic":1173},{"name":64},{"id":629,"name":630,"tactic":1175},{"name":39},{"id":478,"name":479,"tactic":1177},{"name":39},{"id":482,"name":483,"tactic":1179},{"name":39},{"id":486,"name":487,"tactic":1181},{"name":64},{"id":1183,"name":1184,"techniques":1185},"CAPEC-574","Services Footprinting",[1186],{"id":1187,"name":1188,"tactics":1189,"countermeasures":1191},"T1007","System Service Discovery",[1190],{"id":753,"name":754},[1192,1194,1196,1198,1200,1202],{"id":827,"name":828,"tactic":1193},{"name":64},{"id":486,"name":487,"tactic":1195},{"name":64},{"id":629,"name":630,"tactic":1197},{"name":39},{"id":482,"name":483,"tactic":1199},{"name":39},{"id":478,"name":479,"tactic":1201},{"name":39},{"id":619,"name":620,"tactic":1203},{"name":39},{"id":1205,"name":1206,"techniques":1207},"CAPEC-575","Account Footprinting",[1208],{"id":1209,"name":1210,"tactics":1211,"countermeasures":1213},"T1087","Account Discovery",[1212],{"id":753,"name":754},[1214,1216,1218,1220,1222,1224,1226,1228,1230],{"id":332,"name":333,"tactic":1215},{"name":49},{"id":340,"name":341,"tactic":1217},{"name":49},{"id":348,"name":349,"tactic":1219},{"name":59},{"id":360,"name":361,"tactic":1221},{"name":44},{"id":352,"name":353,"tactic":1223},{"name":39},{"id":336,"name":337,"tactic":1225},{"name":187},{"id":356,"name":357,"tactic":1227},{"name":44},{"id":344,"name":345,"tactic":1229},{"name":64},{"id":364,"name":365,"tactic":1231},{"name":64},{"id":1233,"name":1234,"techniques":1235},"CAPEC-576","Group Permission Footprinting",[1236,1242],{"id":1237,"name":1238,"tactics":1239,"countermeasures":1241},"T1069","Permission Groups Discovery",[1240],{"id":753,"name":754},[],{"id":1243,"name":1244,"tactics":1245,"countermeasures":1247},"T1615","Group Policy Discovery",[1246],{"id":753,"name":754},[1248,1250,1252,1256],{"id":635,"name":636,"tactic":1249},{"name":187},{"id":336,"name":337,"tactic":1251},{"name":187},{"id":1253,"name":1254,"tactic":1255},"D3-NTPM","Network Traffic Policy Mapping",{"name":187},{"id":661,"name":662,"tactic":1257},{"name":49},{"id":1259,"name":1260,"techniques":1261},"CAPEC-577","Owner Footprinting",[1262],{"id":1263,"name":1264,"tactics":1265,"countermeasures":1267},"T1033","System Owner/User Discovery",[1266],{"id":753,"name":754},[1268,1270,1272,1274,1276,1278,1280,1282,1286,1288,1290,1292,1294,1296,1298,1300,1302,1304,1306,1308,1310,1312,1316,1318,1320,1324,1326,1328,1330,1332,1334],{"id":209,"name":210,"tactic":1269},{"name":49},{"id":478,"name":479,"tactic":1271},{"name":39},{"id":213,"name":214,"tactic":1273},{"name":64},{"id":490,"name":491,"tactic":1275},{"name":39},{"id":217,"name":218,"tactic":1277},{"name":64},{"id":619,"name":620,"tactic":1279},{"name":39},{"id":494,"name":495,"tactic":1281},{"name":39},{"id":1283,"name":1284,"tactic":1285},"D3-SAOR","Segment Address Offset Randomization",{"name":44},{"id":462,"name":463,"tactic":1287},{"name":64},{"id":189,"name":190,"tactic":1289},{"name":39},{"id":466,"name":467,"tactic":1291},{"name":64},{"id":486,"name":487,"tactic":1293},{"name":64},{"id":229,"name":230,"tactic":1295},{"name":49},{"id":193,"name":194,"tactic":1297},{"name":39},{"id":827,"name":828,"tactic":1299},{"name":64},{"id":197,"name":198,"tactic":1301},{"name":39},{"id":482,"name":483,"tactic":1303},{"name":39},{"id":201,"name":202,"tactic":1305},{"name":39},{"id":225,"name":226,"tactic":1307},{"name":54},{"id":629,"name":630,"tactic":1309},{"name":39},{"id":180,"name":181,"tactic":1311},{"name":44},{"id":1313,"name":1314,"tactic":1315},"D3-DTP","Domain Trust Policy",{"name":39},{"id":205,"name":206,"tactic":1317},{"name":39},{"id":176,"name":177,"tactic":1319},{"name":59},{"id":1321,"name":1322,"tactic":1323},"D3-PSEP","Process Segment Execution Prevention",{"name":44},{"id":184,"name":185,"tactic":1325},{"name":187},{"id":474,"name":475,"tactic":1327},{"name":39},{"id":450,"name":451,"tactic":1329},{"name":59},{"id":454,"name":455,"tactic":1331},{"name":59},{"id":458,"name":459,"tactic":1333},{"name":59},{"id":470,"name":471,"tactic":1335},{"name":59},{"id":1337,"name":1338,"techniques":1339},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":1341,"name":1342,"techniques":1343},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[1344,1374],{"id":1345,"name":1346,"tactics":1347,"countermeasures":1351},"T1134.001","Token Impersonation/Theft",[1348,1349,1350],{"id":322,"name":323},{"id":325,"name":326},{"id":168,"name":169},[1352,1354,1356,1358,1360,1362,1364,1366,1368,1370,1372],{"id":66,"name":67,"tactic":1353},{"name":44},{"id":51,"name":52,"tactic":1355},{"name":54},{"id":46,"name":47,"tactic":1357},{"name":49},{"id":36,"name":37,"tactic":1359},{"name":39},{"id":153,"name":154,"tactic":1361},{"name":44},{"id":56,"name":57,"tactic":1363},{"name":59},{"id":74,"name":75,"tactic":1365},{"name":59},{"id":41,"name":42,"tactic":1367},{"name":44},{"id":107,"name":108,"tactic":1369},{"name":44},{"id":70,"name":71,"tactic":1371},{"name":44},{"id":61,"name":62,"tactic":1373},{"name":64},{"id":1375,"name":1376,"tactics":1377,"countermeasures":1380},"T1550.004","Web Session Cookie",[1378,1379],{"id":322,"name":323},{"id":241,"name":242},[1381,1383,1385,1387,1389,1391,1393,1395,1397,1399,1401,1403,1405,1407,1409,1411,1413,1415,1417,1419,1421,1423,1425,1427,1429,1431,1433,1435,1437,1439],{"id":482,"name":483,"tactic":1382},{"name":39},{"id":462,"name":463,"tactic":1384},{"name":64},{"id":56,"name":57,"tactic":1386},{"name":59},{"id":119,"name":120,"tactic":1388},{"name":64},{"id":458,"name":459,"tactic":1390},{"name":59},{"id":127,"name":128,"tactic":1392},{"name":64},{"id":111,"name":112,"tactic":1394},{"name":64},{"id":131,"name":132,"tactic":1396},{"name":64},{"id":61,"name":62,"tactic":1398},{"name":64},{"id":139,"name":140,"tactic":1400},{"name":64},{"id":70,"name":71,"tactic":1402},{"name":44},{"id":454,"name":455,"tactic":1404},{"name":59},{"id":474,"name":475,"tactic":1406},{"name":39},{"id":478,"name":479,"tactic":1408},{"name":39},{"id":450,"name":451,"tactic":1410},{"name":59},{"id":470,"name":471,"tactic":1412},{"name":59},{"id":123,"name":124,"tactic":1414},{"name":64},{"id":466,"name":467,"tactic":1416},{"name":64},{"id":51,"name":52,"tactic":1418},{"name":54},{"id":494,"name":495,"tactic":1420},{"name":39},{"id":115,"name":116,"tactic":1422},{"name":64},{"id":41,"name":42,"tactic":1424},{"name":44},{"id":490,"name":491,"tactic":1426},{"name":39},{"id":46,"name":47,"tactic":1428},{"name":49},{"id":143,"name":144,"tactic":1430},{"name":64},{"id":36,"name":37,"tactic":1432},{"name":39},{"id":74,"name":75,"tactic":1434},{"name":59},{"id":66,"name":67,"tactic":1436},{"name":44},{"id":486,"name":487,"tactic":1438},{"name":64},{"id":99,"name":100,"tactic":1440},{"name":39},{"id":1442,"name":1443,"techniques":1444},"CAPEC-616","Establish Rogue Location",[1445],{"id":1446,"name":1447,"tactics":1448,"countermeasures":1451},"T1036.005","Match Legitimate Resource Name or Location",[1449,1450],{"id":322,"name":323},{"id":325,"name":326},[1452,1454,1456,1458,1460,1462,1464,1466,1468,1470,1472,1474,1476],{"id":827,"name":828,"tactic":1453},{"name":64},{"id":213,"name":214,"tactic":1455},{"name":64},{"id":189,"name":190,"tactic":1457},{"name":39},{"id":197,"name":198,"tactic":1459},{"name":39},{"id":209,"name":210,"tactic":1461},{"name":49},{"id":478,"name":479,"tactic":1463},{"name":39},{"id":201,"name":202,"tactic":1465},{"name":39},{"id":180,"name":181,"tactic":1467},{"name":44},{"id":193,"name":194,"tactic":1469},{"name":39},{"id":217,"name":218,"tactic":1471},{"name":64},{"id":205,"name":206,"tactic":1473},{"name":39},{"id":176,"name":177,"tactic":1475},{"name":59},{"id":225,"name":226,"tactic":1477},{"name":54},{"id":1479,"name":1480,"techniques":1481},"CAPEC-643","Identify Shared Files/Directories on System",[1482],{"id":1483,"name":1484,"tactics":1485,"countermeasures":1487},"T1135","Network Share Discovery",[1486],{"id":753,"name":754},[],{"id":1489,"name":1490,"techniques":1491},"CAPEC-646","Peripheral Footprinting",[1492],{"id":1493,"name":1494,"tactics":1495,"countermeasures":1497},"T1120","Peripheral Device Discovery",[1496],{"id":753,"name":754},[],{"id":1499,"name":1500,"techniques":1501},"CAPEC-651","Eavesdropping",[1502],{"id":1503,"name":1504,"tactics":1505,"countermeasures":1507},"T1111","Multi-Factor Authentication Interception",[1506],{"id":32,"name":33},[1508,1512],{"id":1509,"name":1510,"tactic":1511},"D3-HCI","Hardware Component Inventory",{"name":187},{"id":1513,"name":1514,"tactic":1515},"D3-RH","Radiation Hardening",{"name":44},{"id":1517,"name":1518,"techniques":1519},"CAPEC-79","Using Slashes in Alternate Encoding",[],[],[],[],[],[],[],"2026-08-24T19:38:50.437Z","2026-08-24T19:51:35.236Z","PUBLISHED",{"cisa_kev":1530,"cisa_ransomware":1530,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":1531,"severity_score":1532,"severity_version":1533,"severity_source":1534,"severity_vector":1535,"severity_status":1528},false,"critical",9.4,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",[1537],{"url":1538,"sources":1539,"tags":1540},"https://github.com/RansomLook/RansomLook/commit/b358dfa4f40c677a47c602ebbb4473aeae349f5c",[1534],[1541],"Patch",[],[],[1545],{"source":1534,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":1546},{"baseScore":1532,"baseSeverity":1547,"vectorString":1535,"impactScore":9,"exploitabilityScore":9},"CRITICAL",[1549],{"ecosystem":9,"name":1550,"vendor":1550,"product":1550,"cpe_part":1551,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1552},"ransomlook","a",[1553],{"version":1554,"is_range":1555,"range_type":1534,"version_start":9,"version_start_type":9,"version_end":1556,"version_end_type":1557,"fixed_in":9},"\u003C= 2.0.0",true,"2.0.0","including"]