L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin12 menções
safepay10 menções
SilentRansomGroup7 menções
AuditTeam4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
rhysida4 menções
Whitearmor3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
SilentRansomGroupG... R...— · Not Found · 2026-11-03
Booba ProjectDROUIN SASFR · Manufacturing · 2026-11-03
Booba ProjectCity of EdgewaterUS · Government & Defense · 2026-11-03
Booba ProjectVetstoriaSE · Healthcare · 2026-11-03
Booba ProjectBoardman ParkGB · Other · 2026-11-03
N0nCompany #127SA · Not Found · 2026-11-03
N0nCompany #126— · Not Found · 2026-11-03
N0nCompany #125US · Not Found · 2026-11-03
N0nCompany #124US · Not Found · 2026-11-03
N0nCompany #123US · Not Found · 2026-11-03
rhysidaHere at Pope and Johnson County Title Company— · Financial Services · 2026-11-03
PixelLeaksUnnamedIT · Not Found · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-96832HIGH

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-96831HIGH

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.36%
CVE-2026-96830HIGH

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96829MEDIUM

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-96828HIGH

Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96827HIGH

Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96825MEDIUM

Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.2EPSS 0.20%
CVE-2026-96824MEDIUM

Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.39%
CVE-2026-96823HIGH

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-96822CRITICAL

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.29%
CVE-2026-96821MEDIUM

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.3EPSS 0.25%
CVE-2026-96820HIGH

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-96819HIGH

Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-96818HIGH

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-96817HIGH

Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.2EPSS 0.36%
CVE-2026-96816HIGH

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96815HIGH

Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.32%
CVE-2026-96814HIGH

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96450MEDIUM

Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.16%
CVE-2026-96352HIGH

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96351HIGH

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96350CRITICAL

Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.45%
CVE-2026-96349CRITICAL

Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.60%
CVE-2026-96348HIGH

Unauthenticated Broken Access Control in Bookly <= 28.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.27%