thegentlemen22 menções
Curious Worm12 menções
akira6 menções
play6 menções
incransom4 menções
qilin4 menções
Aoqin3 menções
Booba Project3 menções
Dark Project3 menções
N0n3 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
BarracudaFINSAES · Financial Services · 2026-11-14
netrunnerF***** G****** C********** C***US · Not Found · 2026-11-14
EndZoneMomentum Telecom— · Technology · 2026-11-14
EndZoneAbsolute Bail BondsUS · Financial Services · 2026-11-14
Scarlettgroupfittleworth.comGB · Retail & E-Commerce · 2026-11-14
netrunnerI****** A*****KW · Not Found · 2026-11-14
everestGrundbaulabor Trier GmbHDE · Manufacturing · 2026-11-14
qilinKayaku Safety Systems Malaysia Sdn BhdMY · Manufacturing · 2026-11-14
interlockK&A IndustriesUS · Not Found · 2026-11-13
everestFinal Notice Before Publication— · Other · 2026-11-13
Curious Wormi*t*r***t.com— · Technology · 2026-11-13
Curious Wormt**a.com— · Not Found · 2026-11-13
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
34743 REGISTROS ENCONTRADOSFEED 2026-11-10
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters
AFFECTED SURFACEjetbrains youtrack
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
AFFECTED SURFACEjetbrains hub
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation
AFFECTED SURFACEjetbrains rider
In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings
AFFECTED SURFACEjetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export
AFFECTED SURFACEjetbrains youtrack
In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
AFFECTED SURFACEjetbrains intellij idea
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
AFFECTED SURFACEjetbrains teamcity
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings
AFFECTED SURFACEProduct not specified
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL
AFFECTED SURFACEProduct not specified
Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4.
AFFECTED SURFACEProduct not specified
Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Version 0.33.5 contains a patch. No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori.
AFFECTED SURFACEProduct not specified