Bitget Bitcoin Withdrawals Resume After $387.5M Wallet Breach - https://www.redpacketsecurity.com/bitget-restarts-bitcoin-withdrawals-following-387-5m-wallet-breach/
RedPacket Security
Bitget Bitcoin Withdrawals Resume After $387.5M Wallet Breach - RedPacket Security
Bitcoin withdrawals reopened at 08:00 UTC on September 28. The service had been paused while Bitget reviewed its withdrawal infrastructure following the
MCP Governance Gaps: Researchers Warn of Major Risks - https://www.redpacketsecurity.com/mcp-is-creating-major-governance-gaps-researchers-warn/
RedPacket Security
MCP Governance Gaps: Researchers Warn of Major Risks - RedPacket Security
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make
CVE Alert: CVE-2026-101860 - RaspAP - raspap-webgui - https://www.redpacketsecurity.com/cve-alert-cve-2026-101860-raspap-raspap-webgui/
RedPacket Security
CVE Alert: CVE-2026-101860 - RaspAP - raspap-webgui - RedPacket Security
A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file
CVE Alert: CVE-2026-101280 - Trusted Domain Project - OpenDMARC - https://www.redpacketsecurity.com/cve-alert-cve-2026-101280-trusted-domain-project-opendmarc/
RedPacket Security
CVE Alert: CVE-2026-101280 - Trusted Domain Project - OpenDMARC - RedPacket Security
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component
CVE Alert: CVE-2026-101281 - Trusted Domain Project - OpenDMARC - https://www.redpacketsecurity.com/cve-alert-cve-2026-101281-trusted-domain-project-opendmarc/
RedPacket Security
CVE Alert: CVE-2026-101281 - Trusted Domain Project - OpenDMARC - RedPacket Security
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of
CVE Alert: CVE-2026-96326 - htplugins - HT Contact Form – Drag & Drop Form Builder for WordPress - https://www.redpacketsecurity.com/cve-alert-cve-2026-96326-htplugins-ht-contact-form-drag-drop-form-builder-for-wordpress/
RedPacket Security
CVE Alert: CVE-2026-96326 - htplugins - HT Contact Form – Drag & Drop Form Builder for WordPress - RedPacket Security
The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor
CVE Alert: CVE-2026-101878 - bitwarden - bitwarden server - https://www.redpacketsecurity.com/cve-alert-cve-2026-101878-bitwarden-bitwarden-server/
RedPacket Security
CVE Alert: CVE-2026-101878 - bitwarden - bitwarden server - RedPacket Security
Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored procedure as
Mythic C2 Detected - 146.190.120.19146[.]190[.]120[.]19:7443 - https://www.redpacketsecurity.com/mythic-c2-detected-146-190-120-19-port-7443/
RedPacket Security
Mythic C2 Detected - 146.190.120.19146[.]190[.]120[.]19:7443 - RedPacket Security
Mythic C2 Detection Alerts
Mythic C2 Detected - 193.201.185.90193[.]201[.]185[.]90:7443 - https://www.redpacketsecurity.com/mythic-c2-detected-193-201-185-90-port-7443/
RedPacket Security
Mythic C2 Detected - 193.201.185.90193[.]201[.]185[.]90:7443 - RedPacket Security
Mythic C2 Detection Alerts
Mythic C2 Detected - 172.94.9.194172[.]94[.]9[.]194:7443 - https://www.redpacketsecurity.com/mythic-c2-detected-172-94-9-194-port-7443/
RedPacket Security
Mythic C2 Detected - 172.94.9.194172[.]94[.]9[.]194:7443 - RedPacket Security
Mythic C2 Detection Alerts
CVE Alert: CVE-2026-102248 - n/a - Rebuild - https://www.redpacketsecurity.com/cve-alert-cve-2026-102248-n-a-rebuild/
RedPacket Security
CVE Alert: CVE-2026-102248 - n/a - Rebuild - RedPacket Security
A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The
CVE Alert: CVE-2026-102245 - MODSetter - SurfSense - https://www.redpacketsecurity.com/cve-alert-cve-2026-102245-modsetter-surfsense/
RedPacket Security
CVE Alert: CVE-2026-102245 - MODSetter - SurfSense - RedPacket Security
A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file
CVE Alert: CVE-2026-102243 - MODSetter - SurfSense - https://www.redpacketsecurity.com/cve-alert-cve-2026-102243-modsetter-surfsense/
RedPacket Security
CVE Alert: CVE-2026-102243 - MODSetter - SurfSense - RedPacket Security
A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file
NeedyMantis: Unpacking a post-compromise malware family used in targetedoperations - https://www.redpacketsecurity.com/needymantis-unpacking-a-post-compromise-malware-family-used-in-targetedoperations/
RedPacket Security
NeedyMantis: Unpacking a post-compromise malware family used in targetedoperations - RedPacket Security
Microsoft Threat Intelligence has identified NeedyMantis, a modular post-compromise malware family observed in a limited number of targeted operations
CVE Alert: CVE-2026-86950 - Apple - iOS and iPadOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86950-apple-ios-and-ipados/
RedPacket Security
CVE Alert: CVE-2026-86950 - Apple - iOS and iPadOS - RedPacket Security
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS
CVE Alert: CVE-2026-102566 - OpenNMT - CTranslate2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-102566-opennmt-ctranslate2/
RedPacket Security
CVE Alert: CVE-2026-102566 - OpenNMT - CTranslate2 - RedPacket Security
CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size.
CVE Alert: CVE-2026-102249 - n/a - REBUILD - https://www.redpacketsecurity.com/cve-alert-cve-2026-102249-n-a-rebuild/
RedPacket Security
CVE Alert: CVE-2026-102249 - n/a - REBUILD - RedPacket Security
A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation
CVE Alert: CVE-2026-102558 - Red Hat - Red Hat Enterprise Linux 10 - https://www.redpacketsecurity.com/cve-alert-cve-2026-102558-red-hat-red-hat-enterprise-linux-10/
RedPacket Security
CVE Alert: CVE-2026-102558 - Red Hat - Red Hat Enterprise Linux 10 - RedPacket Security
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an
CVE Alert: CVE-2026-86450 - Parla Auto Automotive Trading Limited Company - DetaWix Mobile Web Portal - https://www.redpacketsecurity.com/cve-alert-cve-2026-86450-parla-auto-automotive-trading-limited-company-detawix-mobile-web-portal/
RedPacket Security
CVE Alert: CVE-2026-86450 - Parla Auto Automotive Trading Limited Company - DetaWix Mobile Web Portal - RedPacket Security
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing
CVE Alert: CVE-2026-102293 - realjerrytang - tacomall - https://www.redpacketsecurity.com/cve-alert-cve-2026-102293-realjerrytang-tacomall/
RedPacket Security
CVE Alert: CVE-2026-102293 - realjerrytang - tacomall - RedPacket Security
A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the
CVE Alert: CVE-2026-102559 - Red Hat - Red Hat Enterprise Linux 10 - https://www.redpacketsecurity.com/cve-alert-cve-2026-102559-red-hat-red-hat-enterprise-linux-10/
RedPacket Security
CVE Alert: CVE-2026-102559 - Red Hat - Red Hat Enterprise Linux 10 - RedPacket Security
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation