L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n67 menções

interlock8 menções

krybit5 menções

Vortex3 menções

Aoqin2 menções

Black X2 menções

Global Secret Group2 menções

SilentRansomGroup2 menções

metaencryptor2 menções

BYOD1 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

interlockMadison HondaUS · Retail & E-Commerce · 2026-11-10

interlockCustom Floors UnlimitedUS · Retail & E-Commerce · 2026-11-10

interlockMeadows Valley School DistrictUS · Education · 2026-11-10

interlockRidgway High SchoolUS · Education · 2026-11-10

interlockSouthwest Orthopedic & Reconstructive SpecialistsUS · Healthcare · 2026-11-10

interlockAssiniboine Dental GroupCA · Healthcare · 2026-11-10

interlockElmcrest Children's Center, IncUS · Healthcare · 2026-11-10

interlockConecuh Sausage Company IncUS · Agriculture and Food Production · 2026-11-10

VortexCRESAUS · Professional Services · 2026-11-10

VortexALEXIONUS · Healthcare · 2026-11-10

VortexPYRAMID HEALTHCAREUS · Healthcare · 2026-11-10

N0nLandmark GroupAE · Retail & E-Commerce · 2026-11-10

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03

CVE-2026-39749MEDIUM

Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39748HIGH

Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39747HIGH

Subscriber SQL Injection in Woffice <= 5.4.35 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39746CRITICAL

Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39745HIGH

Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39731HIGH

Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39730HIGH

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.2.

AFFECTED SURFACEProduct not specified

CVE-2026-39729HIGH

Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39728HIGH

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39727MEDIUM

Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39726HIGH

Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39725HIGH

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39724HIGH

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39722HIGH

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39720HIGH

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39719HIGH

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32581HIGH

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32580HIGH

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32579CRITICAL

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32578HIGH

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32577HIGH

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32575HIGH

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32574HIGH

Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32572HIGH

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

AFFECTED SURFACEProduct not specified