L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm12 menções
akira6 menções
play6 menções
incransom4 menções
qilin4 menções
Aoqin3 menções
Booba Project3 menções
Dark Project3 menções
N0n3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BarracudaFINSAES · Financial Services · 2026-11-14
netrunnerF***** G****** C********** C***US · Not Found · 2026-11-14
EndZoneMomentum Telecom— · Technology · 2026-11-14
EndZoneAbsolute Bail BondsUS · Financial Services · 2026-11-14
Scarlettgroupfittleworth.comGB · Retail & E-Commerce · 2026-11-14
netrunnerI****** A*****KW · Not Found · 2026-11-14
everestGrundbaulabor Trier GmbHDE · Manufacturing · 2026-11-14
qilinKayaku Safety Systems Malaysia Sdn BhdMY · Manufacturing · 2026-11-14
interlockK&A IndustriesUS · Not Found · 2026-11-13
everestFinal Notice Before Publication— · Other · 2026-11-13
Curious Wormi*t*r***t.com— · Technology · 2026-11-13
Curious Wormt**a.com— · Not Found · 2026-11-13
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-97250HIGH

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.15%
CVE-2026-97249MEDIUM

Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.20%
CVE-2026-97248CRITICAL

Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.39%
CVE-2026-97247MEDIUM

Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97246MEDIUM

Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.9EPSS 0.21%
CVE-2026-97245HIGH

Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.34%
CVE-2026-97244HIGH

Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97243MEDIUM

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.4EPSS 0.22%
CVE-2026-97242MEDIUM

Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.36%
CVE-2026-97241HIGH

Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97240HIGH

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.30%
CVE-2026-97239MEDIUM

Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.28%
CVE-2026-97238MEDIUM

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.17%
CVE-2026-97237HIGH

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97236MEDIUM

Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.21%
CVE-2026-97235HIGH

Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-97197HIGH

Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.29%
CVE-2026-97079MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.28%
CVE-2026-97078MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97077HIGH

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-97074MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.3EPSS 0.25%
CVE-2026-97067MEDIUM

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-97066MEDIUM

Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.23%
CVE-2026-97065HIGH

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%