L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin23 menções
N0n16 menções
emperador7 menções
Whitearmor6 menções
krybit6 menções
lockbit55 menções
SilentRansomGroup3 menções
akira3 menções
payload3 menções
rhysida3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmorLoveSacUS · Retail & E-Commerce · 2026-10-26
payloadGlückauf-Vermessung GmbHDE · Professional Services · 2026-10-26
payloadMiletic GmbHDE · Not Found · 2026-10-26
payloadEdelstahl-Mechanik GmbHDE · Manufacturing · 2026-10-26
WhitearmorJ.B HuntUS · Transportation · 2026-10-26
qilinWhite & CaseUS · Professional Services · 2026-10-25
WhitearmorPartido LiberalAR · Government & Defense · 2026-10-25
FalconWeitz & LuxenbergUS · Professional Services · 2026-10-25
FalconAstrana HealthUS · Healthcare · 2026-10-25
emperadorA-RMS— · Government & Defense · 2026-10-25
PanzerYodingenierieBJ · Professional Services · 2026-10-25
HYFLOCKAesthetic Dental Designs, P.AUS · Healthcare · 2026-10-25
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20
CVE-2026-97078MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97077HIGH

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-97074MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.25%
CVE-2026-97067MEDIUM

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-97066MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97065HIGH

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96838HIGH

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.14%
CVE-2026-96837HIGH

Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.54%
CVE-2026-96836HIGH

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96835MEDIUM

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%
CVE-2026-96834MEDIUM

Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-96833HIGH

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.40%
CVE-2026-96832HIGH

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-96831HIGH

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.36%
CVE-2026-96830HIGH

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96829MEDIUM

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-96828HIGH

Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96827HIGH

Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96825MEDIUM

Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.2EPSS 0.20%
CVE-2026-96824MEDIUM

Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.39%
CVE-2026-96823HIGH

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-96822CRITICAL

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.29%
CVE-2026-96821MEDIUM

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.3EPSS 0.25%
CVE-2026-96820HIGH

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%