N0n16 menções
qilin13 menções
safepay10 menções
akira6 menções
incransom6 menções
Aoqin4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
Whitearmor3 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04
AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04
AoqinNextron TechnologyCN · Technology · 2026-11-04
AoqinGoldsmith & HullUS · Professional Services · 2026-11-04
incransombliss1041.comUS · Not Found · 2026-11-03
incransominnovativedriven.comUS · Technology · 2026-11-03
incransombutler.legalUS · Professional Services · 2026-11-03
incransomroundglass.comUS · Healthcare · 2026-11-03
incransomfidepartners.comES · Financial Services · 2026-11-03
chaosdarrequipment.comUS · Manufacturing · 2026-11-03
FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03
WhitearmorProject Trojan Horse— · Other · 2026-11-03
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
30947 REGISTROS ENCONTRADOSFEED 2026-11-03
Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Author SQL Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Administrator SQL Injection in Estatik <= 4.3.5 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.
AFFECTED SURFACEProduct not specified
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's key reference, before the message is authenticated, so an eleven-byte extension triggers a 2 GB allocation. Repeated requests exhaust server memory. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions.
AFFECTED SURFACEProduct not specified
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.
AFFECTED SURFACEProduct not specified
Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber Broken Access Control in FormGent <= 1.12.2 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
AFFECTED SURFACEProduct not specified
Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.
AFFECTED SURFACEProduct not specified
Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.
AFFECTED SURFACEProduct not specified