thegentlemen22 menções
Curious Worm12 menções
akira6 menções
play6 menções
incransom4 menções
qilin4 menções
Aoqin3 menções
Booba Project3 menções
Dark Project3 menções
N0n3 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
BarracudaFINSAES · Financial Services · 2026-11-14
netrunnerF***** G****** C********** C***US · Not Found · 2026-11-14
EndZoneMomentum Telecom— · Technology · 2026-11-14
EndZoneAbsolute Bail BondsUS · Financial Services · 2026-11-14
Scarlettgroupfittleworth.comGB · Retail & E-Commerce · 2026-11-14
netrunnerI****** A*****KW · Not Found · 2026-11-14
everestGrundbaulabor Trier GmbHDE · Manufacturing · 2026-11-14
qilinKayaku Safety Systems Malaysia Sdn BhdMY · Manufacturing · 2026-11-14
interlockK&A IndustriesUS · Not Found · 2026-11-13
everestFinal Notice Before Publication— · Other · 2026-11-13
Curious Wormi*t*r***t.com— · Technology · 2026-11-13
Curious Wormt**a.com— · Not Found · 2026-11-13
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
34743 REGISTROS ENCONTRADOSFEED 2026-11-10
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1.
AFFECTED SURFACEProduct not specified
A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
AFFECTED SURFACEProduct not specified
Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.
AFFECTED SURFACEProduct not specified
Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.
AFFECTED SURFACEProduct not specified
Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.2.6 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.
AFFECTED SURFACEProduct not specified
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5.
AFFECTED SURFACEProduct not specified
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.
AFFECTED SURFACEProduct not specified
Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
AFFECTED SURFACEProduct not specified
Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.
AFFECTED SURFACEProduct not specified
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.
AFFECTED SURFACEProduct not specified