L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n20 menções

qilin13 menções

akira6 menções

incransom6 menções

safepay5 menções

Aoqin4 menções

Booba Project4 menções

Orova4 menções

payload4 menções

Whitearmor3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

N0nCompany #132US · Not Found · 2026-11-04

N0nCompany #131DE · Not Found · 2026-11-04

N0nCompany #130US · Not Found · 2026-11-04

N0nCompany #129US · Not Found · 2026-11-04

N0nCompany #128US · Not Found · 2026-11-04

rhysidaJuge, Napolitano, Ruli, Putfark & Pittman— · Professional Services · 2026-11-04

Scarlettgroupsigsauer.comUS · Manufacturing · 2026-11-04

AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04

AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04

AoqinNextron TechnologyCN · Technology · 2026-11-04

AoqinGoldsmith & HullUS · Professional Services · 2026-11-04

DoommageddonASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş.TR · Manufacturing · 2026-11-04

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03

CVE-2026-95604HIGH

Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95603HIGH

Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95602MEDIUM

Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1.

AFFECTED SURFACEProduct not specified

CVE-2026-95601CRITICAL

Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95600MEDIUM

Unauthenticated Sensitive Data Exposure in TrustedLogin Connector <= 2.0.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95593HIGH

Editor SQL Injection in Ultimeter <= 3.0.8 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95592MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Team <= 6.0.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95590HIGH

Subscriber SQL Injection in Tainacan <= 1.2.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95586MEDIUM

Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95530MEDIUM

Subscriber Cross Site Scripting (XSS) in PixelYourSite – Your smart PIXEL (TAG) Manager <= 11.4.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95529HIGH

Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95528HIGH

Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95527MEDIUM

Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95525MEDIUM

Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95524MEDIUM

Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95523MEDIUM

Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95522HIGH

Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95515HIGH

Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95514MEDIUM

Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-95513HIGH

Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-94684MEDIUM

Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-94682MEDIUM

Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-94680MEDIUM

Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-94679MEDIUM

Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.

AFFECTED SURFACEProduct not specified