L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n24 menções

qilin11 menções

BrainCipher8 menções

SilentRansomGroup7 menções

Booba Project6 menções

lamashtu6 menções

akira5 menções

everest5 menções

Global Secret Group3 menções

Dark Project2 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

rhysidaDR.SCHNELL GmbH & Co. KGaADE · Manufacturing · 2026-10-22

qilinAirtificial— · Technology · 2026-10-22

qilinBathurst RSLAU · Hospitality · 2026-10-22

qilinCreative UniverseAU · Other · 2026-10-22

everestPWCGB · Professional Services · 2026-10-22

N0nPerformance Ford IncUS · Retail & E-Commerce · 2026-10-22

N0nCompany #109— · Not Found · 2026-10-22

N0nCompany #108— · Not Found · 2026-10-22

N0nCompany #107BG · Not Found · 2026-10-22

N0nCompany #106— · Not Found · 2026-10-22

N0nCompany #105— · Not Found · 2026-10-22

N0nCompany #104— · Not Found · 2026-10-22

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20

CVE-2026-39720HIGH

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39719HIGH

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32581HIGH

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32580HIGH

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32579CRITICAL

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32578HIGH

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32577HIGH

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32575HIGH

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32574HIGH

Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32572HIGH

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32571MEDIUM

Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32570HIGH

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32569HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32568CRITICAL

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32557CRITICAL

Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-25434HIGH

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-25433HIGH

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105879MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2.

AFFECTED SURFACEProduct not specified

CVE-2026-105809LOW

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

AFFECTED SURFACEProduct not specified

CVE-2026-105808LOW

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

AFFECTED SURFACEProduct not specified

CVE-2026-105317HIGH

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105071HIGH

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105070HIGH

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105061HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.

AFFECTED SURFACEProduct not specified