L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm10 menções
interlock9 menções
Booba Project6 menções
incransom5 menções
SilentRansomGroup4 menções
play4 menções
Aoqin3 menções
Climax Inc3 menções
Vortex3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12
Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12
AoqinAirbluePK · Transportation · 2026-11-12
PanzerMinistry of Health MalaysiaMY · Government & Defense · 2026-11-12
krybitcey-tech.comCY · Technology · 2026-11-12
incransomaxiscades.comIN · Manufacturing · 2026-11-12
metaencryptorPromantra, Inc.US · Technology · 2026-11-12
BarracudaProLiantUS · Technology · 2026-11-12
qilinThe University of Texas at ArlingtonUS · Education · 2026-11-12
qilinYork UniversityCA · Education · 2026-11-12
medusalockerDep— · Not Found · 2026-11-11
playMinor League BaseballUS · Hospitality · 2026-11-11
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-42718CRITICAL

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-42717HIGH

Administrator SQL Injection in Leyka <= 3.32.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-42716CRITICAL

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-42715HIGH

Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42712HIGH

Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.34%
CVE-2026-42711HIGH

Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42709HIGH

Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42706HIGH

Unauthenticated Broken Access Control in DK <= 3.2.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-42705HIGH

Unauthenticated Broken Access Control in Grand News <= 3.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-42704HIGH

Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.35%
CVE-2026-42702HIGH

Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42699HIGH

Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42697HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42696CRITICAL

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration &amp; Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration &amp; Cloning: from n/a through 1.5.19.

AFFECTED SURFACEProduct not specified
CVSS 10.0EPSS 0.39%
CVE-2026-42693HIGH

Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42633HIGH

Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.34%
CVE-2026-42632HIGH

Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42631HIGH

Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-42630HIGH

Unauthenticated Sensitive Data Exposure in Web Plura Backup &amp; Restore Manager <= 0.2.25 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-42419MEDIUM

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.9EPSS 0.26%
CVE-2026-40808MEDIUM

Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-40805HIGH

Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.7EPSS 0.45%
CVE-2026-40803HIGH

Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-40802HIGH

Subscriber Settings Change in Pubjet | پاب‌جت <= 5.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.29%