L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n67 menções

interlock8 menções

krybit5 menções

Vortex3 menções

Aoqin2 menções

Black X2 menções

Global Secret Group2 menções

SilentRansomGroup2 menções

metaencryptor2 menções

BYOD1 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

interlockMadison HondaUS · Retail & E-Commerce · 2026-11-10

interlockCustom Floors UnlimitedUS · Retail & E-Commerce · 2026-11-10

interlockMeadows Valley School DistrictUS · Education · 2026-11-10

interlockRidgway High SchoolUS · Education · 2026-11-10

interlockSouthwest Orthopedic & Reconstructive SpecialistsUS · Healthcare · 2026-11-10

interlockAssiniboine Dental GroupCA · Healthcare · 2026-11-10

interlockElmcrest Children's Center, IncUS · Healthcare · 2026-11-10

interlockConecuh Sausage Company IncUS · Agriculture and Food Production · 2026-11-10

VortexCRESAUS · Professional Services · 2026-11-10

VortexALEXIONUS · Healthcare · 2026-11-10

VortexPYRAMID HEALTHCAREUS · Healthcare · 2026-11-10

N0nLandmark GroupAE · Retail & E-Commerce · 2026-11-10

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03

CVE-2026-39775HIGH

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39774HIGH

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39773CRITICAL

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39772MEDIUM

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39771HIGH

Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39770CRITICAL

Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39769HIGH

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39768HIGH

Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39767MEDIUM

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39766HIGH

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39765HIGH

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39764CRITICAL

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39762MEDIUM

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

AFFECTED SURFACEProduct not specified

CVE-2026-39761CRITICAL

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39759CRITICAL

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39758HIGH

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39757CRITICAL

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39756MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39755CRITICAL

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39754MEDIUM

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39753CRITICAL

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39752HIGH

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39751HIGH

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39750HIGH

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified