L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
qilin13 menções
akira6 menções
incransom6 menções
safepay5 menções
Aoqin4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
Whitearmor3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
N0nCompany #132US · Not Found · 2026-11-04
N0nCompany #131DE · Not Found · 2026-11-04
N0nCompany #130US · Not Found · 2026-11-04
N0nCompany #129US · Not Found · 2026-11-04
N0nCompany #128US · Not Found · 2026-11-04
rhysidaJuge, Napolitano, Ruli, Putfark & Pittman— · Professional Services · 2026-11-04
Scarlettgroupsigsauer.comUS · Manufacturing · 2026-11-04
AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04
AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04
AoqinNextron TechnologyCN · Technology · 2026-11-04
AoqinGoldsmith & HullUS · Professional Services · 2026-11-04
DoommageddonASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş.TR · Manufacturing · 2026-11-04
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-94671MEDIUM

Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94500MEDIUM

Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94498MEDIUM

Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.24%
CVE-2026-94487HIGH

Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.13%
CVE-2026-94461MEDIUM

Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94457MEDIUM

Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.8EPSS 0.19%
CVE-2026-94391MEDIUM

Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94181HIGH

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification.

AFFECTED SURFACEProduct not specified
CVSS 7.4EPSS 0.26%
CVE-2026-94179HIGH

Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-94176HIGH

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-94174HIGH

Administrator SQL Injection in Email Log <= 2.63 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.29%
CVE-2026-94168MEDIUM

Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94124HIGH

Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.22%
CVE-2026-94118MEDIUM

Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.17%
CVE-2026-94080MEDIUM

Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.22%
CVE-2026-94079MEDIUM

Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.22%
CVE-2026-93774HIGH

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-93773HIGH

Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.22%
CVE-2026-93772MEDIUM

Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-93623MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-93622HIGH

Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-93620MEDIUM

Unauthenticated Broken Access Control in PayPlus Payment Gateway <= 8.2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.19%
CVE-2026-93618MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%
CVE-2026-93529MEDIUM

Contributor Broken Access Control in WSP MCP &#8211; AI Agents Connector <= 2.7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%