L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm10 menções
interlock9 menções
Booba Project6 menções
incransom5 menções
SilentRansomGroup4 menções
play4 menções
Aoqin3 menções
Climax Inc3 menções
Vortex3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12
Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12
AoqinAirbluePK · Transportation · 2026-11-12
PanzerMinistry of Health MalaysiaMY · Government & Defense · 2026-11-12
krybitcey-tech.comCY · Technology · 2026-11-12
incransomaxiscades.comIN · Manufacturing · 2026-11-12
metaencryptorPromantra, Inc.US · Technology · 2026-11-12
BarracudaProLiantUS · Technology · 2026-11-12
qilinThe University of Texas at ArlingtonUS · Education · 2026-11-12
qilinYork UniversityCA · Education · 2026-11-12
medusalockerDep— · Not Found · 2026-11-11
playMinor League BaseballUS · Hospitality · 2026-11-11
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-62043HIGH

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-62038HIGH

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.3EPSS 0.27%
CVE-2026-62037HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62035MEDIUM

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.3EPSS 0.25%
CVE-2026-62034HIGH

Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62033HIGH

Subscriber Settings Change in uListing <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.30%
CVE-2026-62032CRITICAL

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.35%
CVE-2026-62031CRITICAL

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.29%
CVE-2026-62030HIGH

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.19%
CVE-2026-62027HIGH

Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-62025CRITICAL

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.0EPSS 0.29%
CVE-2026-62024CRITICAL

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.45%
CVE-2026-62022CRITICAL

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.33%
CVE-2026-62021HIGH

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.48%
CVE-2026-62020HIGH

Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-57742HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.15%
CVE-2026-48194HIGH

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-48193HIGH

Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-45440HIGH

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-42777HIGH

Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-42724HIGH

Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-42723CRITICAL

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-42722HIGH

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-42719CRITICAL

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.53%