L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n66 menções
Deadlock6 menções
krybit5 menções
lockbit54 menções
BYOD3 menções
incransom3 menções
metaencryptor2 menções
Aoqin1 menções
Barracuda1 menções
HYFLOCK1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
rhysidaM.C.S. Steel Public Company LimitedTH · Manufacturing · 2026-11-09
HYFLOCKCameroon government troops leakedCM · Government & Defense · 2026-11-09
BYODVanderbilt EDUUS · Education · 2026-11-09
everstakecarrollins.comUS · Retail & E-Commerce · 2026-11-09
N0nCompany #211US · Not Found · 2026-11-09
N0nCompany #210US · Not Found · 2026-11-09
N0nCompany #209US · Not Found · 2026-11-09
N0nCompany #208— · Not Found · 2026-11-09
N0nCompany #207NL · Not Found · 2026-11-09
N0nCompany #206— · Not Found · 2026-11-09
N0nCompany #205US · Not Found · 2026-11-09
N0nCompany #204US · Not Found · 2026-11-09
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-42712HIGH

Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.34%
CVE-2026-42711HIGH

Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42709HIGH

Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42706HIGH

Unauthenticated Broken Access Control in DK <= 3.2.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-42705HIGH

Unauthenticated Broken Access Control in Grand News <= 3.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-42704HIGH

Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-42702HIGH

Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42699HIGH

Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42697HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42696CRITICAL

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration &amp; Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration &amp; Cloning: from n/a through 1.5.19.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.39%
CVE-2026-42693HIGH

Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42633HIGH

Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.34%
CVE-2026-42632HIGH

Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42631HIGH

Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42630HIGH

Unauthenticated Sensitive Data Exposure in Web Plura Backup &amp; Restore Manager <= 0.2.25 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-42419MEDIUM

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.9EPSS 0.26%
CVE-2026-40808MEDIUM

Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-40805HIGH

Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.7EPSS 0.45%
CVE-2026-40803HIGH

Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-40802HIGH

Subscriber Settings Change in Pubjet | پاب‌جت <= 5.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.29%
CVE-2026-40801HIGH

Subscriber Broken Access Control in Wordable <= 8.2.10 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.33%
CVE-2026-40800CRITICAL

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.38%
CVE-2026-40777HIGH

Subscriber Broken Access Control in WPSection <= 1.5.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-39802HIGH

Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.46%