L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin13 menções
safepay10 menções
SilentRansomGroup6 menções
akira6 menções
AuditTeam4 menções
Booba Project4 menções
Orova4 menções
Whitearmor4 menções
payload4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03
WhitearmorProject Trojan Horse— · Other · 2026-11-03
SilentRansomGroupG... R...— · Not Found · 2026-11-03
Booba ProjectDROUIN SASFR · Manufacturing · 2026-11-03
Booba ProjectCity of EdgewaterUS · Government & Defense · 2026-11-03
Booba ProjectVetstoriaSE · Healthcare · 2026-11-03
Booba ProjectBoardman ParkGB · Other · 2026-11-03
N0nCompany #127SA · Not Found · 2026-11-03
N0nCompany #126— · Not Found · 2026-11-03
N0nCompany #125US · Not Found · 2026-11-03
N0nCompany #124US · Not Found · 2026-11-03
N0nCompany #123US · Not Found · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-39775HIGH

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.34%
CVE-2026-39774HIGH

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.25%
CVE-2026-39773CRITICAL

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.29%
CVE-2026-39772MEDIUM

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.36%
CVE-2026-39771HIGH

Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-39770CRITICAL

Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.42%
CVE-2026-39769HIGH

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.48%
CVE-2026-39768HIGH

Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39767MEDIUM

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.41%
CVE-2026-39766HIGH

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39765HIGH

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.46%
CVE-2026-39764CRITICAL

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments &amp; Services <= 1.0.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.30%
CVE-2026-39762MEDIUM

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-39761CRITICAL

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.48%
CVE-2026-39759CRITICAL

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.48%
CVE-2026-39758HIGH

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39757CRITICAL

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.48%
CVE-2026-39756MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.26%
CVE-2026-39755CRITICAL

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.45%
CVE-2026-39754MEDIUM

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-39753CRITICAL

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.45%
CVE-2026-39752HIGH

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.7EPSS 0.45%
CVE-2026-39751HIGH

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-39750HIGH

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%