L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n27 menções

qilin10 menções

BrainCipher8 menções

SilentRansomGroup7 menções

Booba Project6 menções

lamashtu6 menções

everest5 menções

Global Secret Group3 menções

incransom3 menções

Dark Project2 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

qilinBathurst RSLAU · Hospitality · 2026-10-22

qilinCreative UniverseAU · Other · 2026-10-22

everestPWCGB · Professional Services · 2026-10-22

N0nPerformance Ford IncUS · Retail & E-Commerce · 2026-10-22

N0nCompany #109— · Not Found · 2026-10-22

N0nCompany #108— · Not Found · 2026-10-22

N0nCompany #107BG · Not Found · 2026-10-22

N0nCompany #106— · Not Found · 2026-10-22

N0nCompany #105— · Not Found · 2026-10-22

N0nCompany #104— · Not Found · 2026-10-22

spacebearsSGLA (Schwartz, Giannini, Lantsberger & Adamson)US · Professional Services · 2026-10-22

lamashtuHecker HolzsystembauDE · Manufacturing · 2026-10-22

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20

CVE-2026-39759CRITICAL

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39758HIGH

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39757CRITICAL

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39756MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39755CRITICAL

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39754MEDIUM

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39753CRITICAL

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39752HIGH

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39751HIGH

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39750HIGH

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39749MEDIUM

Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39748HIGH

Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39747HIGH

Subscriber SQL Injection in Woffice <= 5.4.35 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39746CRITICAL

Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39745HIGH

Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39731HIGH

Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39730HIGH

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.2.

AFFECTED SURFACEProduct not specified

CVE-2026-39729HIGH

Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39728HIGH

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39727MEDIUM

Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39726HIGH

Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39725HIGH

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39724HIGH

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39722HIGH

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.

AFFECTED SURFACEProduct not specified