L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin13 menções
genesis9 menções
safepay9 menções
SilentRansomGroup7 menções
Booba Project6 menções
emperador5 menções
everstake5 menções
rhysida5 menções
AuditTeam4 menções
Shiba4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BarracudaEVINOKSTR · Technology · 2026-11-01
qilinDanserUS · Other · 2026-11-01
Vexy RansomwareJHAMF GroupBD · Not Found · 2026-10-31
Vexy RansomwareSystem SoftBG · Technology · 2026-10-31
emperadorPunta ShoppingBR · Retail & E-Commerce · 2026-10-31
payloadStraze Garden Center— · Retail & E-Commerce · 2026-10-31
payloadKraft LernenDE · Education · 2026-10-31
payloadSALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)DE · Government & Defense · 2026-10-31
rhysidaPhoenix Charter AcademyUS · Education · 2026-10-31
sarcomaIvan Smith FurniturePH · Retail & E-Commerce · 2026-10-31
WhitearmorGamdom V2— · Other · 2026-10-31
emperadorHolcimCH · Manufacturing · 2026-10-31
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-39773CRITICAL

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.29%
CVE-2026-39772MEDIUM

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.36%
CVE-2026-39771HIGH

Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-39770CRITICAL

Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.42%
CVE-2026-39769HIGH

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.48%
CVE-2026-39768HIGH

Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39767MEDIUM

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.41%
CVE-2026-39766HIGH

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39765HIGH

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.46%
CVE-2026-39764CRITICAL

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments &amp; Services <= 1.0.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.30%
CVE-2026-39762MEDIUM

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-39761CRITICAL

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.48%
CVE-2026-39759CRITICAL

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.48%
CVE-2026-39758HIGH

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39757CRITICAL

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.48%
CVE-2026-39756MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.26%
CVE-2026-39755CRITICAL

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.45%
CVE-2026-39754MEDIUM

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-39753CRITICAL

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.45%
CVE-2026-39752HIGH

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.7EPSS 0.45%
CVE-2026-39751HIGH

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-39750HIGH

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39749MEDIUM

Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-39748HIGH

Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%