L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n27 menções
qilin10 menções
BrainCipher8 menções
SilentRansomGroup7 menções
Booba Project6 menções
lamashtu6 menções
everest5 menções
Global Secret Group3 menções
incransom3 menções
Dark Project2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
qilinBathurst RSLAU · Hospitality · 2026-10-22
qilinCreative UniverseAU · Other · 2026-10-22
everestPWCGB · Professional Services · 2026-10-22
N0nPerformance Ford IncUS · Retail & E-Commerce · 2026-10-22
N0nCompany #109— · Not Found · 2026-10-22
N0nCompany #108— · Not Found · 2026-10-22
N0nCompany #107BG · Not Found · 2026-10-22
N0nCompany #106— · Not Found · 2026-10-22
N0nCompany #105— · Not Found · 2026-10-22
N0nCompany #104— · Not Found · 2026-10-22
spacebearsSGLA (Schwartz, Giannini, Lantsberger & Adamson)US · Professional Services · 2026-10-22
lamashtuHecker HolzsystembauDE · Manufacturing · 2026-10-22
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20
CVE-2026-39791MEDIUM

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-39790HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39788MEDIUM

Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-39787MEDIUM

Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.29%
CVE-2026-39785CRITICAL

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-39784HIGH

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39781HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39780HIGH

Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39778HIGH

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39776HIGH

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.38%
CVE-2026-39775HIGH

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.34%
CVE-2026-39774HIGH

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.25%
CVE-2026-39773CRITICAL

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.29%
CVE-2026-39772MEDIUM

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.36%
CVE-2026-39771HIGH

Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-39770CRITICAL

Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.42%
CVE-2026-39769HIGH

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.48%
CVE-2026-39768HIGH

Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39767MEDIUM

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.41%
CVE-2026-39766HIGH

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39765HIGH

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.46%
CVE-2026-39764CRITICAL

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments &amp; Services <= 1.0.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.30%
CVE-2026-39762MEDIUM

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-39761CRITICAL

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.48%