L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

thegentlemen22 menções

Curious Worm10 menções

interlock9 menções

Booba Project6 menções

incransom5 menções

play4 menções

Aoqin3 menções

Climax Inc3 menções

SilentRansomGroup3 menções

Vexy Ransomware3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12

Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12

AoqinAirbluePK · Transportation · 2026-11-12

Vexy RansomwareUpper WebBR · Technology · 2026-11-12

Vexy RansomwareOsiiminppalGL · Not Found · 2026-11-12

Vexy RansomwareFranc-OilNG · Energy & Utilities · 2026-11-12

PanzerMinistry of Health MalaysiaMY · Government & Defense · 2026-11-12

krybitcey-tech.comCY · Technology · 2026-11-12

incransomaxiscades.comIN · Manufacturing · 2026-11-12

metaencryptorPromantra, Inc.US · Technology · 2026-11-12

BarracudaProLiantUS · Technology · 2026-11-12

qilinThe University of Texas at ArlingtonUS · Education · 2026-11-12

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10

CVE-2026-96539MEDIUM

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96518MEDIUM

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

AFFECTED SURFACEProduct not specified

CVE-2026-96461HIGH

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

AFFECTED SURFACEProduct not specified

CVE-2026-96337MEDIUM

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

AFFECTED SURFACEProduct not specified

CVE-2026-96336HIGH

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

AFFECTED SURFACEProduct not specified

CVE-2026-96334MEDIUM

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7.

AFFECTED SURFACEProduct not specified

CVE-2026-96333HIGH

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96332HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.

AFFECTED SURFACEProduct not specified

CVE-2026-96331CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96330CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

AFFECTED SURFACEProduct not specified

CVE-2026-96329HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

AFFECTED SURFACEProduct not specified

CVE-2026-96328CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96327CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.

AFFECTED SURFACEProduct not specified

CVE-2026-95610HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

AFFECTED SURFACEProduct not specified

CVE-2026-95609HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

AFFECTED SURFACEProduct not specified

CVE-2026-95608HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

AFFECTED SURFACEProduct not specified

CVE-2026-95607HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.

AFFECTED SURFACEProduct not specified

CVE-2026-95599HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.

AFFECTED SURFACEProduct not specified

CVE-2026-95598HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5.

AFFECTED SURFACEProduct not specified

CVE-2026-95597MEDIUM

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17.

AFFECTED SURFACEProduct not specified

CVE-2026-95596HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.

AFFECTED SURFACEProduct not specified

CVE-2026-95591HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.14.

AFFECTED SURFACEProduct not specified

CVE-2026-95589MEDIUM

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.

AFFECTED SURFACEProduct not specified

CVE-2026-94668HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.

AFFECTED SURFACEProduct not specified