L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n66 menções

Deadlock6 menções

krybit5 menções

lockbit54 menções

BYOD3 menções

incransom3 menções

metaencryptor2 menções

Aoqin1 menções

Barracuda1 menções

HYFLOCK1 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

rhysidaM.C.S. Steel Public Company LimitedTH · Manufacturing · 2026-11-09

HYFLOCKCameroon government troops leakedCM · Government & Defense · 2026-11-09

BYODVanderbilt EDUUS · Education · 2026-11-09

everstakecarrollins.comUS · Retail & E-Commerce · 2026-11-09

N0nCompany #211US · Not Found · 2026-11-09

N0nCompany #210US · Not Found · 2026-11-09

N0nCompany #209US · Not Found · 2026-11-09

N0nCompany #208— · Not Found · 2026-11-09

N0nCompany #207NL · Not Found · 2026-11-09

N0nCompany #206— · Not Found · 2026-11-09

N0nCompany #205US · Not Found · 2026-11-09

N0nCompany #204US · Not Found · 2026-11-09

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03

CVE-2026-62034HIGH

Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62033HIGH

Subscriber Settings Change in uListing <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62032CRITICAL

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62031CRITICAL

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62030HIGH

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62027HIGH

Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62025CRITICAL

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62024CRITICAL

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62022CRITICAL

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62021HIGH

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-62020HIGH

Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-57742HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.

AFFECTED SURFACEProduct not specified

CVE-2026-48194HIGH

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-48193HIGH

Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-45440HIGH

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42777HIGH

Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42724HIGH

Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42723CRITICAL

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42722HIGH

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42719CRITICAL

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42718CRITICAL

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42717HIGH

Administrator SQL Injection in Leyka <= 3.32.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42716CRITICAL

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-42715HIGH

Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

AFFECTED SURFACEProduct not specified