L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin13 menções
safepay10 menções
akira6 menções
incransom6 menções
Aoqin4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
Whitearmor3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04
AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04
AoqinNextron TechnologyCN · Technology · 2026-11-04
AoqinGoldsmith & HullUS · Professional Services · 2026-11-04
incransombliss1041.comUS · Not Found · 2026-11-03
incransominnovativedriven.comUS · Technology · 2026-11-03
incransombutler.legalUS · Professional Services · 2026-11-03
incransomroundglass.comUS · Healthcare · 2026-11-03
incransomfidepartners.comES · Financial Services · 2026-11-03
chaosdarrequipment.comUS · Manufacturing · 2026-11-03
FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03
WhitearmorProject Trojan Horse— · Other · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-97246MEDIUM

Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.9EPSS 0.21%
CVE-2026-97245HIGH

Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.34%
CVE-2026-97244HIGH

Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97243MEDIUM

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.22%
CVE-2026-97242MEDIUM

Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.36%
CVE-2026-97241HIGH

Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97240HIGH

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97239MEDIUM

Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-97238MEDIUM

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.17%
CVE-2026-97237HIGH

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97236MEDIUM

Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97235HIGH

Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97197HIGH

Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.29%
CVE-2026-97079MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.28%
CVE-2026-97078MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97077HIGH

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-97074MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.25%
CVE-2026-97067MEDIUM

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-97066MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97065HIGH

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96838HIGH

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.14%
CVE-2026-96837HIGH

Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.54%
CVE-2026-96836HIGH

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96835MEDIUM

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%