L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n66 menções
Deadlock6 menções
krybit5 menções
lockbit54 menções
BYOD3 menções
incransom3 menções
metaencryptor2 menções
Aoqin1 menções
Barracuda1 menções
HYFLOCK1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
rhysidaM.C.S. Steel Public Company LimitedTH · Manufacturing · 2026-11-09
HYFLOCKCameroon government troops leakedCM · Government & Defense · 2026-11-09
BYODVanderbilt EDUUS · Education · 2026-11-09
everstakecarrollins.comUS · Retail & E-Commerce · 2026-11-09
N0nCompany #211US · Not Found · 2026-11-09
N0nCompany #210US · Not Found · 2026-11-09
N0nCompany #209US · Not Found · 2026-11-09
N0nCompany #208— · Not Found · 2026-11-09
N0nCompany #207NL · Not Found · 2026-11-09
N0nCompany #206— · Not Found · 2026-11-09
N0nCompany #205US · Not Found · 2026-11-09
N0nCompany #204US · Not Found · 2026-11-09
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-66483CRITICAL

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66482CRITICAL

Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66481MEDIUM

Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.33%
CVE-2026-66480MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.20%
CVE-2026-65459HIGH

Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.24%
CVE-2026-62130HIGH

Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.30%
CVE-2026-62129CRITICAL

Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.27%
CVE-2026-62125CRITICAL

Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62124CRITICAL

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62123CRITICAL

Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62120CRITICAL

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62118HIGH

Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.3EPSS 0.22%
CVE-2026-62117HIGH

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.28%
CVE-2026-62116HIGH

Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62115HIGH

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62100HIGH

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62099HIGH

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62098MEDIUM

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-62096HIGH

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62095HIGH

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62094HIGH

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62093HIGH

Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62092HIGH

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62091HIGH

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%