L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

thegentlemen22 menções

PixelLeaks20 menções

Curious Worm12 menções

akira4 menções

Aoqin3 menções

N0n3 menções

Vexy Ransomware3 menções

incransom3 menções

play3 menções

qilin3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

PixelLeaksPT. Fiber Networks Indonesia (AltosDLP surveillance platform, fiber.net.id)ID · Technology · 2026-11-15

PixelLeaksHuangshi Medical Laboratory (黄石医养医学检验) / Ezong Medical Group x Getein JVCN · Healthcare · 2026-11-15

PixelLeaksSPI Corp / SPI Energy group (spicorp-invest.com)US · Energy & Utilities · 2026-11-15

PixelLeaksBEAM Society (iBeam platform, www.ibeam.hk)HK · Technology · 2026-11-15

PixelLeaksKing International Investment Ltd (HKEX: 00928, Lianhe Medical subsidiary)HK · Healthcare · 2026-11-15

PixelLeaksInternational Utility Specialists Inc.— · Energy & Utilities · 2026-11-15

PixelLeaksBoston Institute of Finance (CRC designation, ex-InFRE, Colibri Group)— · Financial Services · 2026-11-15

PixelLeaksHofstetter Business Technologies— · Professional Services · 2026-11-15

PixelLeaksProducts Group International Inc— · Other · 2026-11-15

PixelLeaksOrion Communications IncUS · Technology · 2026-11-15

PixelLeaksMissouri Welding Institute (missouriweldinginstitute.com)US · Education · 2026-11-15

PixelLeaksKoehler Financial Group IncUS · Financial Services · 2026-11-15

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10

CVE-2026-100775ANALYSIS

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100774ANALYSIS

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100773ANALYSIS

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100772ANALYSIS

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100771ANALYSIS

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100770ANALYSIS

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100769ANALYSIS

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100768ANALYSIS

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100767ANALYSIS

Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100766ANALYSIS

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100765ANALYSIS

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100764HIGH

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100763ANALYSIS

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100762ANALYSIS

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100761HIGH

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100760ANALYSIS

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100759ANALYSIS

Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100758ANALYSIS

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100757ANALYSIS

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100756ANALYSIS

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-95520HIGH

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext() that shrinks a buffer allocation to one byte, after which the payload's independently-controlled cpio filesize field is used to write attacker-controlled data past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an untrusted package.

AFFECTED SURFACEProduct not specified

CVE-2026-87748HIGH

Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2.

AFFECTED SURFACEProduct not specified

CVE-2026-85520CRITICAL

Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the lack of authentication and input validation, the request is processed successfully, allowing an attacker to write and execute arbitrary PHP code, resulting in remote code execution (RCE). This issue was fixed in version 2.3.9.

AFFECTED SURFACEProduct not specified

CVE-2026-73597MEDIUM

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.

AFFECTED SURFACEProduct not specified