L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

qilin13 menções

genesis9 menções

safepay9 menções

SilentRansomGroup7 menções

Booba Project6 menções

emperador5 menções

everstake5 menções

rhysida5 menções

AuditTeam4 menções

Shiba4 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

BarracudaEVINOKSTR · Technology · 2026-11-01

qilinDanserUS · Other · 2026-11-01

Vexy RansomwareJHAMF GroupBD · Not Found · 2026-10-31

Vexy RansomwareSystem SoftBG · Technology · 2026-10-31

emperadorPunta ShoppingBR · Retail & E-Commerce · 2026-10-31

payloadStraze Garden Center— · Retail & E-Commerce · 2026-10-31

payloadKraft LernenDE · Education · 2026-10-31

payloadSALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)DE · Government & Defense · 2026-10-31

rhysidaPhoenix Charter AcademyUS · Education · 2026-10-31

sarcomaIvan Smith FurniturePH · Retail & E-Commerce · 2026-10-31

WhitearmorGamdom V2— · Other · 2026-10-31

emperadorHolcimCH · Manufacturing · 2026-10-31

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27

CVE-2026-32569HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32568CRITICAL

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32557CRITICAL

Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-25434HIGH

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-25433HIGH

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105879MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2.

AFFECTED SURFACEProduct not specified

CVE-2026-105809LOW

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

AFFECTED SURFACEProduct not specified

CVE-2026-105808LOW

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

AFFECTED SURFACEProduct not specified

CVE-2026-105317HIGH

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105071HIGH

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105070HIGH

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105061HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105059MEDIUM

Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105058HIGH

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-105057MEDIUM

Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104814HIGH

Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104757HIGH

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104747HIGH

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104672HIGH

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104670HIGH

Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104406HIGH

Unauthenticated Broken Access Control in picu <= 3.10.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104405HIGH

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-104399MEDIUM

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.

AFFECTED SURFACEProduct not specified

CVE-2026-104395HIGH

Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.

AFFECTED SURFACEProduct not specified