qilin23 menções
N0n16 menções
emperador7 menções
Whitearmor6 menções
krybit6 menções
lockbit55 menções
SilentRansomGroup3 menções
akira3 menções
payload3 menções
rhysida3 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
WhitearmorLoveSacUS · Retail & E-Commerce · 2026-10-26
payloadGlückauf-Vermessung GmbHDE · Professional Services · 2026-10-26
payloadMiletic GmbHDE · Not Found · 2026-10-26
payloadEdelstahl-Mechanik GmbHDE · Manufacturing · 2026-10-26
WhitearmorJ.B HuntUS · Transportation · 2026-10-26
qilinWhite & CaseUS · Professional Services · 2026-10-25
WhitearmorPartido LiberalAR · Government & Defense · 2026-10-25
FalconWeitz & LuxenbergUS · Professional Services · 2026-10-25
FalconAstrana HealthUS · Healthcare · 2026-10-25
emperadorA-RMS— · Government & Defense · 2026-10-25
PanzerYodingenierieBJ · Professional Services · 2026-10-25
HYFLOCKAesthetic Dental Designs, P.AUS · Healthcare · 2026-10-25
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
23205 REGISTROS ENCONTRADOSFEED 2026-10-20
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
AFFECTED SURFACEProduct not specified
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
AFFECTED SURFACEProduct not specified
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
AFFECTED SURFACEProduct not specified
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Author SQL Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Administrator SQL Injection in Estatik <= 4.3.5 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.
AFFECTED SURFACEProduct not specified
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's key reference, before the message is authenticated, so an eleven-byte extension triggers a 2 GB allocation. Repeated requests exhaust server memory. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions.
AFFECTED SURFACEProduct not specified