L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n17 menções

qilin12 menções

safepay10 menções

SilentRansomGroup7 menções

AuditTeam4 menções

Orova4 menções

payload4 menções

rhysida4 menções

thegentlemen4 menções

Whitearmor3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

N0nCompany #127SA · Not Found · 2026-11-03

N0nCompany #126— · Not Found · 2026-11-03

N0nCompany #125US · Not Found · 2026-11-03

N0nCompany #124US · Not Found · 2026-11-03

N0nCompany #123US · Not Found · 2026-11-03

rhysidaHere at Pope and Johnson County Title Company— · Financial Services · 2026-11-03

PixelLeaksUnnamedIT · Not Found · 2026-11-03

payloadStahlbau Mann GmbHDE · Manufacturing · 2026-11-03

N0nCompany #122US · Not Found · 2026-11-03

N0nCompany #121US · Not Found · 2026-11-03

N0nCompany #120US · Not Found · 2026-11-03

N0nCompany #119— · Not Found · 2026-11-03

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27

CVE-2026-97293HIGH

Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97292MEDIUM

Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97289HIGH

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.2.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97288MEDIUM

Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97287HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5.

AFFECTED SURFACEProduct not specified

CVE-2026-97286MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

AFFECTED SURFACEProduct not specified

CVE-2026-97285MEDIUM

Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97282MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97279MEDIUM

Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97274CRITICAL

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97272HIGH

Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97271HIGH

Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97270MEDIUM

Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97267MEDIUM

Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97266MEDIUM

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97262MEDIUM

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97261MEDIUM

Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97253HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.

AFFECTED SURFACEProduct not specified

CVE-2026-97250HIGH

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97249MEDIUM

Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97248CRITICAL

Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97247MEDIUM

Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97246MEDIUM

Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-97245HIGH

Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

AFFECTED SURFACEProduct not specified