L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

thegentlemen22 menções

Curious Worm10 menções

interlock9 menções

Booba Project6 menções

akira6 menções

incransom4 menções

play4 menções

Dark Project3 menções

N0n3 menções

Vexy Ransomware3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

bravoxWorld Wide FittingsUS · Manufacturing · 2026-11-13

Dark ProjectThe CCMCCA · Not Found · 2026-11-13

DoommageddonKoray Topaç Hukuk BürosuTR · Professional Services · 2026-11-13

emperadorCarsemMY · Manufacturing · 2026-11-13

N0nCompany #216BW · Not Found · 2026-11-13

akiraGalorathUS · Professional Services · 2026-11-13

akiraReplogle GlobesUS · Manufacturing · 2026-11-13

akiraParagon Mechanical— · Manufacturing · 2026-11-13

safepaytoyokiki-thailand.comTH · Manufacturing · 2026-11-12

Curious Wormbenchmarkseniorliving.comUS · Healthcare · 2026-11-12

AoqinAirbluePK · Transportation · 2026-11-12

Vexy RansomwareUpper WebBR · Technology · 2026-11-12

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10

CVE-2026-39753CRITICAL

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39752HIGH

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39751HIGH

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39750HIGH

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39749MEDIUM

Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39748HIGH

Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39747HIGH

Subscriber SQL Injection in Woffice <= 5.4.35 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39746CRITICAL

Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39745HIGH

Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39731HIGH

Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39730HIGH

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.2.

AFFECTED SURFACEProduct not specified

CVE-2026-39729HIGH

Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39728HIGH

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39727MEDIUM

Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39726HIGH

Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39725HIGH

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39724HIGH

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39722HIGH

Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39720HIGH

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-39719HIGH

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32581HIGH

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32580HIGH

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32579CRITICAL

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified

CVE-2026-32578HIGH

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.

AFFECTED SURFACEProduct not specified