L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm10 menções
interlock9 menções
Booba Project6 menções
incransom5 menções
SilentRansomGroup4 menções
play4 menções
Aoqin3 menções
Climax Inc3 menções
Vortex3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12
Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12
AoqinAirbluePK · Transportation · 2026-11-12
PanzerMinistry of Health MalaysiaMY · Government & Defense · 2026-11-12
krybitcey-tech.comCY · Technology · 2026-11-12
incransomaxiscades.comIN · Manufacturing · 2026-11-12
metaencryptorPromantra, Inc.US · Technology · 2026-11-12
BarracudaProLiantUS · Technology · 2026-11-12
qilinThe University of Texas at ArlingtonUS · Education · 2026-11-12
qilinYork UniversityCA · Education · 2026-11-12
medusalockerDep— · Not Found · 2026-11-11
playMinor League BaseballUS · Hospitality · 2026-11-11
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-66566HIGH

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-66565CRITICAL

Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66564CRITICAL

Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66563CRITICAL

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66483CRITICAL

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66482CRITICAL

Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-66481MEDIUM

Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.33%
CVE-2026-66480MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.20%
CVE-2026-65459HIGH

Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.24%
CVE-2026-62130HIGH

Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.30%
CVE-2026-62129CRITICAL

Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.27%
CVE-2026-62125CRITICAL

Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62124CRITICAL

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62123CRITICAL

Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62120CRITICAL

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.31%
CVE-2026-62118HIGH

Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.3EPSS 0.22%
CVE-2026-62117HIGH

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.28%
CVE-2026-62116HIGH

Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62115HIGH

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62100HIGH

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62099HIGH

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62098MEDIUM

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-62096HIGH

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.28%
CVE-2026-62095HIGH

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%