L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin23 menções
N0n16 menções
emperador7 menções
Whitearmor6 menções
krybit6 menções
lockbit55 menções
SilentRansomGroup3 menções
akira3 menções
payload3 menções
rhysida3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmorLoveSacUS · Retail & E-Commerce · 2026-10-26
payloadGlückauf-Vermessung GmbHDE · Professional Services · 2026-10-26
payloadMiletic GmbHDE · Not Found · 2026-10-26
payloadEdelstahl-Mechanik GmbHDE · Manufacturing · 2026-10-26
WhitearmorJ.B HuntUS · Transportation · 2026-10-26
qilinWhite & CaseUS · Professional Services · 2026-10-25
WhitearmorPartido LiberalAR · Government & Defense · 2026-10-25
FalconWeitz & LuxenbergUS · Professional Services · 2026-10-25
FalconAstrana HealthUS · Healthcare · 2026-10-25
emperadorA-RMS— · Government & Defense · 2026-10-25
PanzerYodingenierieBJ · Professional Services · 2026-10-25
HYFLOCKAesthetic Dental Designs, P.AUS · Healthcare · 2026-10-25
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20
CVE-2026-97270MEDIUM

Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-97267MEDIUM

Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.21%
CVE-2026-97266MEDIUM

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.13%
CVE-2026-97262MEDIUM

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.13%
CVE-2026-97261MEDIUM

Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.20%
CVE-2026-97253HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.15%
CVE-2026-97250HIGH

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.15%
CVE-2026-97249MEDIUM

Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.20%
CVE-2026-97248CRITICAL

Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-97247MEDIUM

Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97246MEDIUM

Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.9EPSS 0.21%
CVE-2026-97245HIGH

Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.34%
CVE-2026-97244HIGH

Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97243MEDIUM

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.22%
CVE-2026-97242MEDIUM

Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.36%
CVE-2026-97241HIGH

Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97240HIGH

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97239MEDIUM

Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-97238MEDIUM

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.17%
CVE-2026-97237HIGH

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97236MEDIUM

Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97235HIGH

Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97197HIGH

Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.29%
CVE-2026-97079MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.28%