L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin13 menções
genesis9 menções
safepay9 menções
SilentRansomGroup7 menções
Booba Project6 menções
emperador5 menções
everstake5 menções
rhysida5 menções
AuditTeam4 menções
Shiba4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BarracudaEVINOKSTR · Technology · 2026-11-01
qilinDanserUS · Other · 2026-11-01
Vexy RansomwareJHAMF GroupBD · Not Found · 2026-10-31
Vexy RansomwareSystem SoftBG · Technology · 2026-10-31
emperadorPunta ShoppingBR · Retail & E-Commerce · 2026-10-31
payloadStraze Garden Center— · Retail & E-Commerce · 2026-10-31
payloadKraft LernenDE · Education · 2026-10-31
payloadSALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)DE · Government & Defense · 2026-10-31
rhysidaPhoenix Charter AcademyUS · Education · 2026-10-31
sarcomaIvan Smith FurniturePH · Retail & E-Commerce · 2026-10-31
WhitearmorGamdom V2— · Other · 2026-10-31
emperadorHolcimCH · Manufacturing · 2026-10-31
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-41560HIGH

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-41559HIGH

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41555CRITICAL

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-40807HIGH

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-40806HIGH

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39798MEDIUM

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.25%
CVE-2026-39797CRITICAL

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.34%
CVE-2026-39796HIGH

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-39795CRITICAL

Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-39794HIGH

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.39%
CVE-2026-39793HIGH

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.42%
CVE-2026-39792HIGH

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.36%
CVE-2026-39791MEDIUM

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-39790HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39788MEDIUM

Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-39787MEDIUM

Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.29%
CVE-2026-39785CRITICAL

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-39784HIGH

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39781HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39780HIGH

Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39778HIGH

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39776HIGH

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.38%
CVE-2026-39775HIGH

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.34%
CVE-2026-39774HIGH

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.25%