L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

qilin25 menções

Booba Project10 menções

N0n8 menções

Whitearmor8 menções

everest8 menções

emperador7 menções

play7 menções

Falcon3 menções

payload3 menções

BYOD2 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

playTailormade LogisticsDK · Transportation · 2026-10-27

playCoast 2 CoastUS · Retail & E-Commerce · 2026-10-27

playVPC BuildersUS · Professional Services · 2026-10-27

playHygienaUS · Healthcare · 2026-10-27

playMoney Concepts CapitalUS · Financial Services · 2026-10-27

playMicroSearch— · Technology · 2026-10-27

playQLCUS · Technology · 2026-10-27

Whitearmorwagyu.xyz— · Retail & E-Commerce · 2026-10-27

Booba ProjectHorizon Eye Specialists & LASIK CenterUS · Healthcare · 2026-10-27

direwolfGRUPO PETROILMX · Energy & Utilities · 2026-10-27

Booba ProjectHudson River MuseumUS · Education · 2026-10-27

Booba ProjectBASS Medical GroupUS · Healthcare · 2026-10-27

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27

CVE-2026-87955MEDIUM

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1.

AFFECTED SURFACEProduct not specified

CVE-2026-87954MEDIUM

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87953LOW

Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87952LOW

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87951LOW

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87950MEDIUM

Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87949LOW

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87948LOW

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87947MEDIUM

Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87946MEDIUM

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87945MEDIUM

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87944MEDIUM

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87943MEDIUM

Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-87942MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88.

AFFECTED SURFACEProduct not specified

CVE-2026-87941ANALYSIS

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

AFFECTED SURFACEProduct not specified

CVE-2026-87940MEDIUM

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.

AFFECTED SURFACEProduct not specified

CVE-2026-87939MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2.

AFFECTED SURFACEProduct not specified

CVE-2026-87938ANALYSIS

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.

AFFECTED SURFACEProduct not specified

CVE-2026-87937MEDIUM

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.

AFFECTED SURFACEProduct not specified

CVE-2026-87936MEDIUM

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.

AFFECTED SURFACEProduct not specified

CVE-2026-84924MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.

AFFECTED SURFACEProduct not specified

CVE-2026-84923MEDIUM

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.

AFFECTED SURFACEProduct not specified

CVE-2026-84921MEDIUM

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.

AFFECTED SURFACEProduct not specified

CVE-2026-84920MEDIUM

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.

AFFECTED SURFACEProduct not specified