L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n66 menções
Deadlock6 menções
krybit5 menções
lockbit54 menções
BYOD3 menções
incransom3 menções
metaencryptor2 menções
Aoqin1 menções
Barracuda1 menções
HYFLOCK1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
rhysidaM.C.S. Steel Public Company LimitedTH · Manufacturing · 2026-11-09
HYFLOCKCameroon government troops leakedCM · Government & Defense · 2026-11-09
BYODVanderbilt EDUUS · Education · 2026-11-09
everstakecarrollins.comUS · Retail & E-Commerce · 2026-11-09
N0nCompany #211US · Not Found · 2026-11-09
N0nCompany #210US · Not Found · 2026-11-09
N0nCompany #209US · Not Found · 2026-11-09
N0nCompany #208— · Not Found · 2026-11-09
N0nCompany #207NL · Not Found · 2026-11-09
N0nCompany #206— · Not Found · 2026-11-09
N0nCompany #205US · Not Found · 2026-11-09
N0nCompany #204US · Not Found · 2026-11-09
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-62090CRITICAL

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62087CRITICAL

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62086CRITICAL

Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62082HIGH

Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62077CRITICAL

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62076CRITICAL

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62075HIGH

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62074HIGH

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62070HIGH

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62069HIGH

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62068HIGH

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62067HIGH

Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62066HIGH

Unauthenticated Local File Inclusion in Volos <= 1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62065HIGH

Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-62064HIGH

Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62054CRITICAL

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62053CRITICAL

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62052CRITICAL

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62051CRITICAL

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62050CRITICAL

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-62043HIGH

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-62038HIGH

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.3EPSS 0.27%
CVE-2026-62037HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62035MEDIUM

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.3EPSS 0.25%