L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin12 menções
safepay10 menções
SilentRansomGroup7 menções
AuditTeam4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
rhysida4 menções
Whitearmor3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
SilentRansomGroupG... R...— · Not Found · 2026-11-03
Booba ProjectDROUIN SASFR · Manufacturing · 2026-11-03
Booba ProjectCity of EdgewaterUS · Government & Defense · 2026-11-03
Booba ProjectVetstoriaSE · Healthcare · 2026-11-03
Booba ProjectBoardman ParkGB · Other · 2026-11-03
N0nCompany #127SA · Not Found · 2026-11-03
N0nCompany #126— · Not Found · 2026-11-03
N0nCompany #125US · Not Found · 2026-11-03
N0nCompany #124US · Not Found · 2026-11-03
N0nCompany #123US · Not Found · 2026-11-03
rhysidaHere at Pope and Johnson County Title Company— · Financial Services · 2026-11-03
PixelLeaksUnnamedIT · Not Found · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-97244HIGH

Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97243MEDIUM

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.22%
CVE-2026-97242MEDIUM

Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.36%
CVE-2026-97241HIGH

Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97240HIGH

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97239MEDIUM

Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-97238MEDIUM

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.17%
CVE-2026-97237HIGH

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97236MEDIUM

Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97235HIGH

Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97197HIGH

Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.29%
CVE-2026-97079MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.28%
CVE-2026-97078MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97077HIGH

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-97074MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.25%
CVE-2026-97067MEDIUM

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-97066MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97065HIGH

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96838HIGH

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.14%
CVE-2026-96837HIGH

Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.54%
CVE-2026-96836HIGH

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96835MEDIUM

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%
CVE-2026-96834MEDIUM

Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-96833HIGH

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.40%