L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin13 menções
safepay10 menções
SilentRansomGroup6 menções
akira6 menções
AuditTeam4 menções
Booba Project4 menções
Orova4 menções
Whitearmor4 menções
payload4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03
WhitearmorProject Trojan Horse— · Other · 2026-11-03
SilentRansomGroupG... R...— · Not Found · 2026-11-03
Booba ProjectDROUIN SASFR · Manufacturing · 2026-11-03
Booba ProjectCity of EdgewaterUS · Government & Defense · 2026-11-03
Booba ProjectVetstoriaSE · Healthcare · 2026-11-03
Booba ProjectBoardman ParkGB · Other · 2026-11-03
N0nCompany #127SA · Not Found · 2026-11-03
N0nCompany #126— · Not Found · 2026-11-03
N0nCompany #125US · Not Found · 2026-11-03
N0nCompany #124US · Not Found · 2026-11-03
N0nCompany #123US · Not Found · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-41562HIGH

Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41561HIGH

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41560HIGH

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-41559HIGH

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41555CRITICAL

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-40807HIGH

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-40806HIGH

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39798MEDIUM

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.25%
CVE-2026-39797CRITICAL

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.34%
CVE-2026-39796HIGH

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-39795CRITICAL

Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-39794HIGH

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.39%
CVE-2026-39793HIGH

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.42%
CVE-2026-39792HIGH

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.36%
CVE-2026-39791MEDIUM

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-39790HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39788MEDIUM

Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-39787MEDIUM

Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.29%
CVE-2026-39785CRITICAL

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-39784HIGH

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39781HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39780HIGH

Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39778HIGH

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39776HIGH

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.38%