위협 인텔리전스 (3,952건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 1시간 전.
CISA KEV
1,760
실제 공격 중
1,942
랜섬웨어
361
익스플로잇 공개
3,499
악용확률 50%↑
906
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 3시간 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2022-22965 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | VMware Spring Framework 🦠 Multiverze (Trojan); Multiverze (Hacktool); CVE-2022-22965 (Exploit); Bitrep (Trojan); SpringShell (Exploit);… |
| 100 | CVE-2023-20198 | 10.0 T9.3 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco IOS XE Web UI 🦠 Black Basta (Ransomware) |
| 100 | CVE-2014-6278 | 8.8 T9.4 | 100.0% | KEV실공격PoC광범위 EPSS 100% | GNU GNU Bash 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2021-33045 | 9.8 T8.8 | 100.0% | KEV익스공개 EPSS 100%원격 | Dahua IP Camera Firmware |
| 100 | CVE-2020-16846 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | SaltStack Salt |
| 100 | CVE-2024-4040 | 9.8 T9.3 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | CrushFTP CrushFTP 🦠 Clop (Ransomware) |
| 100 | CVE-2018-20062 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | ThinkPHP noneCms 🦠 Lucifer (Ransomware) |
| 100 | CVE-2017-0199 | 7.8 T7.5 | 100.0% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Office and WordPad 🦠 Abnormal (Trojan); Generic (Trojan); Generic (Packed); Generic (Downloader); Generic (Phishing); BlackKingdom… |
| 100 | CVE-2015-3306 | 10.0 T9.3 | 100.0% | KEVPoC기능적 EPSS 100%원격 | ProFTPD ProFTPD |
| 100 | CVE-2025-31324 | 10.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | SAP NetWeaver 🦠 CVE-2025-31324 (Exploit); Unattributed (Ransomware); BianLian (Ransomware); Qilin (Ransomware); RansomEXX (Ra… |
| 100 | CVE-2024-23692 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Rejetto HTTP File Server 🦠 Unattributed (Ransomware) |
| 100 | CVE-2022-42475 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS 🦠 CVE-2023-27997 (Exploit); LockBit (Ransomware); RansomHub (Ransomware); Unattributed (Ransomware); Black Bast… |
| 100 | CVE-2017-7494 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Samba Samba 🦠 StorageCrypt (Ransomware); Decryptiomega (Ransomware); NamPoHyu (Ransomware); QNAPCrypt (Ransomware); Unattri… |
| 100 | CVE-2024-38856 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Apache OFBiz |
| 100 | CVE-2024-21412 | 8.1 T8.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 CVE-2024-21412 (Exploit); DarkGate (Trojan); Generic (Trojan); CVE-2024-21338 (Exploit); Kryptina (Ransomware… |
| 100 | CVE-2015-5477 | 7.5 T6.7 | 99.9% | KEVPoC EPSS 100%원격 | ISC BIND |
| 100 | CVE-2017-9805 | 8.1 T7.5 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 Generic (Trojan); CVE-2017-9805 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2021-32030 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | ASUS Routers |
| 100 | CVE-2020-1472 | 5.5 T9.3 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Netlogon 🦠 Babuk (Ransomware); CryptoMix (Ransomware); Epsilon Red (Ransomware); Conti (Ransomware); DarkSide (Ransomwar… |
| 100 | CVE-2017-0148 | 8.1 T8.4 | 99.9% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 server 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2014-6287 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Rejetto HTTP File Server (HFS) 🦠 Lucifer (Ransomware) |
| 100 | CVE-2024-4885 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Progress WhatsUp Gold 🦠 Cactus (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-28771 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Zyxel Multiple Firewalls |
| 100 | CVE-2020-1938 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Apache Tomcat 🦠 CVE-2020-1938 (Exploit); CVE-2019-0199 (Exploit); Ravartar (Trojan) |
| 100 | CVE-2020-14750 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server |
| 100 | CVE-2017-0144 | 8.8 T8.4 | 99.9% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2023-22515 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 CVE-2023-22515 (Exploit); Cerber (Ransomware); RansomHub (Ransomware); Unattributed (Ransomware); Qilin (Rans… |
| 100 | CVE-2024-27348 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Apache HugeGraph-Server |
| 100 | CVE-2018-7602 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Drupal Core |
| 100 | CVE-2021-44529 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) |
| 100 | CVE-2020-0618 | 8.8 T8.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft SQL Server 🦠 TargetCompany (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2019-16278 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Nostromo nhttpd |
| 100 | CVE-2026-24061 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | GNU InetUtils 🦠 Qilin (Ransomware) |
| 100 | CVE-2021-40539 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Zoho ManageEngine 🦠 CVE-2021-40539 (Exploit); AvosLocker (Ransomware); Trigona (Ransomware); Hive (Ransomware); Unattributed (Ran… |
| 100 | CVE-2019-3929 | 9.8 T9.3 | 99.9% | KEVPoC EPSS 100%원격 | Crestron Multiple Products |
| 100 | CVE-2023-36884 | 7.5 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 CVE-2023-36884 (Exploit); CVE-2017-0199 (Exploit); CVE-2023-36874 (Exploit); CVE-2023-32046 (Exploit); CVE-20… |
| 100 | CVE-2017-9791 | 9.8 T9.4 | 99.9% | KEV실공격PoC광범위 EPSS 100% | Apache Struts 1 🦠 Generic (Trojan); CVE-2017-9805 (Exploit); Lucifer (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-3236 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Sophos Firewall |
| 100 | CVE-2023-47246 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | SysAid SysAid Server 🦠 Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-32433 | 10.0 T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Erlang Erlang/OTP 🦠 CVE-2025-32433 (Exploit); The Gentlemen (Ransomware) |
| 100 | CVE-2013-2465 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Oracle Java SE |
| 100 | CVE-2026-1281 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-27925 | 7.2 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) 🦠 BianLian (Ransomware); MalasLocker (Ransomware); Ryuk (Ransomware); Black Basta (Ransomware); Unattributed (R… |
| 100 | CVE-2026-1340 | 9.8 T9.1 | 99.9% | KEV실공격익스공개기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-50623 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Cleo Multiple Products 🦠 Termite (Ransomware); Unattributed (Ransomware); Clop (Ransomware) |
| 100 | CVE-2019-11539 | 7.2 T9.3 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Pulse Connect Secure and Pulse Policy Secure 🦠 Black Kingdom (Ransomware); Mailto (Ransomware); Maze (Ransomware); Sekhmet (Ransomware); Sodinokibi (Ransomw… |
| 100 | CVE-2012-4681 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Oracle Java SE |
| 100 | CVE-2026-41940 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | WebPros cPanel & WHM and WP2 (WordPress Squared) 🦠 CVE-2026-41940 (Exploit); Sorry (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-50603 | 10.0 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Aviatrix Controllers |
| 100 | CVE-2016-3088 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Apache ActiveMQ 🦠 Xbash (Ransomware); Unattributed (Ransomware) |