L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n27 menções
BrainCipher8 menções
qilin8 menções
SilentRansomGroup7 menções
Booba Project6 menções
lamashtu6 menções
everest4 menções
Global Secret Group3 menções
Helix3 menções
incransom3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
N0nPerformance Ford IncUS · Retail & E-Commerce · 2026-10-22
N0nCompany #109— · Not Found · 2026-10-22
N0nCompany #108— · Not Found · 2026-10-22
N0nCompany #107BG · Not Found · 2026-10-22
N0nCompany #106— · Not Found · 2026-10-22
N0nCompany #105— · Not Found · 2026-10-22
N0nCompany #104— · Not Found · 2026-10-22
spacebearsSGLA (Schwartz, Giannini, Lantsberger & Adamson)US · Professional Services · 2026-10-22
lamashtuHecker HolzsystembauDE · Manufacturing · 2026-10-22
everestLinebarger Goggan Blair & SampsonUS · Professional Services · 2026-10-22
SilentRansomGroupK.r.a. ...s— · Not Found · 2026-10-22
lamashtuGräfliches Hofbrauhaus FreisingDE · Agriculture and Food Production · 2026-10-22
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20
CVE-2026-42637MEDIUM

Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-42636HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-42635HIGH

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-42634HIGH

Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-42418HIGH

Unauthenticated Cross Site Scripting (XSS) in Social Rocket <= 1.3.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-42417CRITICAL

Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-42416HIGH

Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-42415CRITICAL

Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-42414HIGH

Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-42413HIGH

Unauthenticated Sensitive Data Exposure in Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate <= 1.3.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41562HIGH

Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41561HIGH

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41560HIGH

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-41559HIGH

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41555CRITICAL

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-40807HIGH

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-40806HIGH

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39798MEDIUM

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.25%
CVE-2026-39797CRITICAL

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.34%
CVE-2026-39796HIGH

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-39795CRITICAL

Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-39794HIGH

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.39%
CVE-2026-39793HIGH

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.42%
CVE-2026-39792HIGH

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.36%