L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n67 menções
interlock8 menções
krybit5 menções
Vortex3 menções
Aoqin2 menções
Black X2 menções
Global Secret Group2 menções
SilentRansomGroup2 menções
metaencryptor2 menções
BYOD1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
interlockMadison HondaUS · Retail & E-Commerce · 2026-11-10
interlockCustom Floors UnlimitedUS · Retail & E-Commerce · 2026-11-10
interlockMeadows Valley School DistrictUS · Education · 2026-11-10
interlockRidgway High SchoolUS · Education · 2026-11-10
interlockSouthwest Orthopedic & Reconstructive SpecialistsUS · Healthcare · 2026-11-10
interlockAssiniboine Dental GroupCA · Healthcare · 2026-11-10
interlockElmcrest Children's Center, IncUS · Healthcare · 2026-11-10
interlockConecuh Sausage Company IncUS · Agriculture and Food Production · 2026-11-10
VortexCRESAUS · Professional Services · 2026-11-10
VortexALEXIONUS · Healthcare · 2026-11-10
VortexPYRAMID HEALTHCAREUS · Healthcare · 2026-11-10
N0nLandmark GroupAE · Retail & E-Commerce · 2026-11-10
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-41562HIGH

Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41561HIGH

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41560HIGH

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-41559HIGH

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41555CRITICAL

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-40807HIGH

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-40806HIGH

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39798MEDIUM

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.25%
CVE-2026-39797CRITICAL

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.34%
CVE-2026-39796HIGH

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-39795CRITICAL

Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-39794HIGH

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.39%
CVE-2026-39793HIGH

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.42%
CVE-2026-39792HIGH

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.36%
CVE-2026-39791MEDIUM

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-39790HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39788MEDIUM

Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-39787MEDIUM

Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.29%
CVE-2026-39785CRITICAL

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-39784HIGH

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39781HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39780HIGH

Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39778HIGH

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39776HIGH

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.38%