L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin23 menções
N0n16 menções
emperador7 menções
Whitearmor6 menções
krybit6 menções
lockbit55 menções
SilentRansomGroup3 menções
akira3 menções
payload3 menções
rhysida3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmorLoveSacUS · Retail & E-Commerce · 2026-10-26
payloadGlückauf-Vermessung GmbHDE · Professional Services · 2026-10-26
payloadMiletic GmbHDE · Not Found · 2026-10-26
payloadEdelstahl-Mechanik GmbHDE · Manufacturing · 2026-10-26
WhitearmorJ.B HuntUS · Transportation · 2026-10-26
qilinWhite & CaseUS · Professional Services · 2026-10-25
WhitearmorPartido LiberalAR · Government & Defense · 2026-10-25
FalconWeitz & LuxenbergUS · Professional Services · 2026-10-25
FalconAstrana HealthUS · Healthcare · 2026-10-25
emperadorA-RMS— · Government & Defense · 2026-10-25
PanzerYodingenierieBJ · Professional Services · 2026-10-25
HYFLOCKAesthetic Dental Designs, P.AUS · Healthcare · 2026-10-25
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

23205 REGISTROS ENCONTRADOSFEED 2026-10-20
CVE-2026-94677HIGH

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.40%
CVE-2026-94674MEDIUM

Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%
CVE-2026-94673MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-94672MEDIUM

Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.21%
CVE-2026-94499HIGH

Subscriber Broken Access Control in FormGent <= 1.12.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.28%
CVE-2026-94389CRITICAL

Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.0EPSS 0.46%
CVE-2026-94178HIGH

Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-94177HIGH

Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.26%
CVE-2026-94173MEDIUM

Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.21%
CVE-2026-94123HIGH

Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.40%
CVE-2026-94122HIGH

Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-94121HIGH

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.38%
CVE-2026-94120HIGH

Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.29%
CVE-2026-94115HIGH

Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.26%
CVE-2026-94082HIGH

Author SQL Injection in Quiz Cat <= 3.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-94081HIGH

Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-94078HIGH

Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-94077MEDIUM

Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-94076HIGH

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.36%
CVE-2026-94074MEDIUM

Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-93771HIGH

Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-93770HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-93651HIGH

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-93624HIGH

Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%