L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
thegentlemen22 menções
Curious Worm12 menções
akira6 menções
play6 menções
incransom4 menções
qilin4 menções
Aoqin3 menções
Booba Project3 menções
Dark Project3 menções
N0n3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BarracudaFINSAES · Financial Services · 2026-11-14
netrunnerF***** G****** C********** C***US · Not Found · 2026-11-14
EndZoneMomentum Telecom— · Technology · 2026-11-14
EndZoneAbsolute Bail BondsUS · Financial Services · 2026-11-14
Scarlettgroupfittleworth.comGB · Retail & E-Commerce · 2026-11-14
netrunnerI****** A*****KW · Not Found · 2026-11-14
everestGrundbaulabor Trier GmbHDE · Manufacturing · 2026-11-14
qilinKayaku Safety Systems Malaysia Sdn BhdMY · Manufacturing · 2026-11-14
interlockK&A IndustriesUS · Not Found · 2026-11-13
everestFinal Notice Before Publication— · Other · 2026-11-13
Curious Wormi*t*r***t.com— · Technology · 2026-11-13
Curious Wormt**a.com— · Not Found · 2026-11-13
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-96838HIGH

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.14%
CVE-2026-96837HIGH

Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.54%
CVE-2026-96836HIGH

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96835MEDIUM

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.16%
CVE-2026-96834MEDIUM

Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.33%
CVE-2026-96833HIGH

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.40%
CVE-2026-96832HIGH

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.37%
CVE-2026-96831HIGH

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.36%
CVE-2026-96830HIGH

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.20%
CVE-2026-96829MEDIUM

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.18%
CVE-2026-96828HIGH

Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96827HIGH

Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.6EPSS 0.28%
CVE-2026-96825MEDIUM

Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

AFFECTED SURFACEProduct not specified
CVSS 4.2EPSS 0.20%
CVE-2026-96824MEDIUM

Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.39%
CVE-2026-96823HIGH

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.32%
CVE-2026-96822CRITICAL

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.29%
CVE-2026-96821MEDIUM

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

AFFECTED SURFACEProduct not specified
CVSS 6.3EPSS 0.25%
CVE-2026-96820HIGH

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-96819HIGH

Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.24%
CVE-2026-96818HIGH

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.25%
CVE-2026-96817HIGH

Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 8.2EPSS 0.36%
CVE-2026-96816HIGH

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%
CVE-2026-96815HIGH

Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.2EPSS 0.32%
CVE-2026-96814HIGH

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.18%