L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm10 menções
interlock9 menções
Booba Project6 menções
akira6 menções
incransom4 menções
play4 menções
Dark Project3 menções
N0n3 menções
Vexy Ransomware3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
bravoxWorld Wide FittingsUS · Manufacturing · 2026-11-13
Dark ProjectThe CCMCCA · Not Found · 2026-11-13
DoommageddonKoray Topaç Hukuk BürosuTR · Professional Services · 2026-11-13
emperadorCarsemMY · Manufacturing · 2026-11-13
N0nCompany #216BW · Not Found · 2026-11-13
akiraGalorathUS · Professional Services · 2026-11-13
akiraReplogle GlobesUS · Manufacturing · 2026-11-13
akiraParagon Mechanical— · Manufacturing · 2026-11-13
safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12
Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12
AoqinAirbluePK · Transportation · 2026-11-12
Vexy RansomwareUpper WebBR · Technology · 2026-11-12
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-42416HIGH

Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-42415CRITICAL

Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-42414HIGH

Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.5EPSS 0.29%
CVE-2026-42413HIGH

Unauthenticated Sensitive Data Exposure in Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate <= 1.3.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41562HIGH

Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41561HIGH

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41560HIGH

Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-41559HIGH

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup &amp; Restore <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-41555CRITICAL

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-40807HIGH

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-40806HIGH

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%
CVE-2026-39798MEDIUM

Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.25%
CVE-2026-39797CRITICAL

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.34%
CVE-2026-39796HIGH

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-39795CRITICAL

Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.33%
CVE-2026-39794HIGH

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.39%
CVE-2026-39793HIGH

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.42%
CVE-2026-39792HIGH

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.36%
CVE-2026-39791MEDIUM

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.25%
CVE-2026-39790HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.25%
CVE-2026-39788MEDIUM

Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.22%
CVE-2026-39787MEDIUM

Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.29%
CVE-2026-39785CRITICAL

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.25%
CVE-2026-39784HIGH

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.19%