L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin13 menções
genesis9 menções
safepay9 menções
SilentRansomGroup7 menções
Booba Project6 menções
emperador5 menções
everstake5 menções
rhysida5 menções
AuditTeam4 menções
Shiba4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BarracudaEVINOKSTR · Technology · 2026-11-01
qilinDanserUS · Other · 2026-11-01
Vexy RansomwareJHAMF GroupBD · Not Found · 2026-10-31
Vexy RansomwareSystem SoftBG · Technology · 2026-10-31
emperadorPunta ShoppingBR · Retail & E-Commerce · 2026-10-31
payloadStraze Garden Center— · Retail & E-Commerce · 2026-10-31
payloadKraft LernenDE · Education · 2026-10-31
payloadSALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)DE · Government & Defense · 2026-10-31
rhysidaPhoenix Charter AcademyUS · Education · 2026-10-31
sarcomaIvan Smith FurniturePH · Retail & E-Commerce · 2026-10-31
WhitearmorGamdom V2— · Other · 2026-10-31
emperadorHolcimCH · Manufacturing · 2026-10-31
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-39747HIGH

Subscriber SQL Injection in Woffice <= 5.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.34%
CVE-2026-39746CRITICAL

Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.38%
CVE-2026-39745HIGH

Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39731HIGH

Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39730HIGH

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.2.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.31%
CVE-2026-39729HIGH

Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.34%
CVE-2026-39728HIGH

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.26%
CVE-2026-39727MEDIUM

Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-39726HIGH

Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39725HIGH

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.74%
CVE-2026-39724HIGH

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39722HIGH

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39720HIGH

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-39719HIGH

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.26%
CVE-2026-32581HIGH

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.27%
CVE-2026-32580HIGH

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.31%
CVE-2026-32579CRITICAL

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.49%
CVE-2026-32578HIGH

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.31%
CVE-2026-32577HIGH

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-32575HIGH

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-32574HIGH

Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-32572HIGH

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-32571MEDIUM

Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-32570HIGH

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%