thegentlemen22 menções
Curious Worm12 menções
akira6 menções
play6 menções
incransom4 menções
qilin4 menções
Aoqin3 menções
Booba Project3 menções
Dark Project3 menções
N0n3 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
BarracudaFINSAES · Financial Services · 2026-11-14
netrunnerF***** G****** C********** C***US · Not Found · 2026-11-14
EndZoneMomentum Telecom— · Technology · 2026-11-14
EndZoneAbsolute Bail BondsUS · Financial Services · 2026-11-14
Scarlettgroupfittleworth.comGB · Retail & E-Commerce · 2026-11-14
netrunnerI****** A*****KW · Not Found · 2026-11-14
everestGrundbaulabor Trier GmbHDE · Manufacturing · 2026-11-14
qilinKayaku Safety Systems Malaysia Sdn BhdMY · Manufacturing · 2026-11-14
interlockK&A IndustriesUS · Not Found · 2026-11-13
everestFinal Notice Before Publication— · Other · 2026-11-13
Curious Wormi*t*r***t.com— · Technology · 2026-11-13
Curious Wormt**a.com— · Not Found · 2026-11-13
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
34743 REGISTROS ENCONTRADOSFEED 2026-11-10
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
AFFECTED SURFACEProduct not specified
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
AFFECTED SURFACEProduct not specified
Author SQL Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Administrator SQL Injection in Estatik <= 4.3.5 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.
AFFECTED SURFACEProduct not specified
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.
AFFECTED SURFACEProduct not specified
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.
AFFECTED SURFACEProduct not specified
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's key reference, before the message is authenticated, so an eleven-byte extension triggers a 2 GB allocation. Repeated requests exhaust server memory. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.
AFFECTED SURFACEProduct not specified
Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
AFFECTED SURFACEProduct not specified
Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions.
AFFECTED SURFACEProduct not specified
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.
AFFECTED SURFACEProduct not specified
Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.
AFFECTED SURFACEProduct not specified
Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.
AFFECTED SURFACEProduct not specified
Subscriber Broken Access Control in FormGent <= 1.12.2 versions.
AFFECTED SURFACEProduct not specified
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
AFFECTED SURFACEProduct not specified