L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

thegentlemen22 menções

Curious Worm10 menções

interlock9 menções

Booba Project6 menções

akira6 menções

incransom4 menções

play4 menções

Dark Project3 menções

N0n3 menções

Vexy Ransomware3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

bravoxWorld Wide FittingsUS · Manufacturing · 2026-11-13

Dark ProjectThe CCMCCA · Not Found · 2026-11-13

DoommageddonKoray Topaç Hukuk BürosuTR · Professional Services · 2026-11-13

emperadorCarsemMY · Manufacturing · 2026-11-13

N0nCompany #216BW · Not Found · 2026-11-13

akiraGalorathUS · Professional Services · 2026-11-13

akiraReplogle GlobesUS · Manufacturing · 2026-11-13

akiraParagon Mechanical— · Manufacturing · 2026-11-13

safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12

Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12

AoqinAirbluePK · Transportation · 2026-11-12

Vexy RansomwareUpper WebBR · Technology · 2026-11-12

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10

CVE-2026-39781HIGH

Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39780HIGH

Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39778HIGH

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39776HIGH

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39775HIGH

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39774HIGH

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39773CRITICAL

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39772MEDIUM

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39771HIGH

Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39770CRITICAL

Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39769HIGH

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39768HIGH

Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39767MEDIUM

Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39766HIGH

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39765HIGH

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39764CRITICAL

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39762MEDIUM

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

AFFECTED SURFACEProduct not specified

CVE-2026-39761CRITICAL

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39759CRITICAL

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39758HIGH

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39757CRITICAL

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39756MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39755CRITICAL

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39754MEDIUM

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

AFFECTED SURFACEProduct not specified