CVE Alert: CVE-2026-61519 - Liberu Software - Liberu CRM - https://www.redpacketsecurity.com/cve-alert-cve-2026-61519-liberu-software-liberu-crm/
RedPacket Security
CVE Alert: CVE-2026-61519 - Liberu Software - Liberu CRM - RedPacket Security
Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional
CVE Alert: CVE-2026-74225 - u-boot - u-boot - https://www.redpacketsecurity.com/cve-alert-cve-2026-74225-u-boot-u-boot/
RedPacket Security
CVE Alert: CVE-2026-74225 - u-boot - u-boot - RedPacket Security
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from
CVE Alert: CVE-2026-74220 - u-boot - u-boot - https://www.redpacketsecurity.com/cve-alert-cve-2026-74220-u-boot-u-boot/
RedPacket Security
CVE Alert: CVE-2026-74220 - u-boot - u-boot - RedPacket Security
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying
CVE Alert: CVE-2026-103042 - ModelTC - LightLLM - https://www.redpacketsecurity.com/cve-alert-cve-2026-103042-modeltc-lightllm/
RedPacket Security
CVE Alert: CVE-2026-103042 - ModelTC - LightLLM - RedPacket Security
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowing unauthenticated
CVE Alert: CVE-2026-74221 - u-boot - u-boot - https://www.redpacketsecurity.com/cve-alert-cve-2026-74221-u-boot-u-boot/
RedPacket Security
CVE Alert: CVE-2026-74221 - u-boot - u-boot - RedPacket Security
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious
CVE Alert: CVE-2026-74222 - u-boot - u-boot - https://www.redpacketsecurity.com/cve-alert-cve-2026-74222-u-boot-u-boot/
RedPacket Security
CVE Alert: CVE-2026-74222 - u-boot - u-boot - RedPacket Security
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage
CVE Alert: CVE-2026-103055 - beenuar - AiSOC - https://www.redpacketsecurity.com/cve-alert-cve-2026-103055-beenuar-aisoc/
RedPacket Security
CVE Alert: CVE-2026-103055 - beenuar - AiSOC - RedPacket Security
AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET
CVE Alert: CVE-2026-103054 - beenuar - AiSOC - https://www.redpacketsecurity.com/cve-alert-cve-2026-103054-beenuar-aisoc/
RedPacket Security
CVE Alert: CVE-2026-103054 - beenuar - AiSOC - RedPacket Security
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to
CVE Alert: CVE-2026-102874 - HKUDS - AnyTool - https://www.redpacketsecurity.com/cve-alert-cve-2026-102874-hkuds-anytool/
RedPacket Security
CVE Alert: CVE-2026-102874 - HKUDS - AnyTool - RedPacket Security
A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component
CVE Alert: CVE-2026-103043 - alexcorvi - anchorme - https://www.redpacketsecurity.com/cve-alert-cve-2026-103043-alexcorvi-anchorme/
RedPacket Security
CVE Alert: CVE-2026-103043 - alexcorvi - anchorme - RedPacket Security
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.
CVE Alert: CVE-2026-102908 - SourceCodester - Online Reviewer Management System - https://www.redpacketsecurity.com/cve-alert-cve-2026-102908-sourcecodester-online-reviewer-management-system/
RedPacket Security
CVE Alert: CVE-2026-102908 - SourceCodester - Online Reviewer Management System - RedPacket Security
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file
Phishing Abuses RMM Tools for Persistent Access - https://www.redpacketsecurity.com/phishing-abuses-rmm-tools-for-persistent-access/
RedPacket Security
Phishing Abuses RMM Tools for Persistent Access - RedPacket Security
In July 2026, Microsoft Defender Experts observed phishing campaigns targeting organizations across multiple industries that distributed a masqueraded MSP360
Star Blizzard refines phishing and malware delivery with the RedFlick technique - https://www.redpacketsecurity.com/star-blizzard-refines-phishing-and-malware-delivery-with-the-redflick-technique/
RedPacket Security
Star Blizzard refines phishing and malware delivery with the RedFlick technique - RedPacket Security
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing
[STORM] - Ransomware Victim: Silvercup Studios - https://www.redpacketsecurity.com/storm-ransomware-victim-silvercup-studios/
RedPacket Security
[STORM] - Ransomware Victim: Silvercup Studios - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[ULOSE] - Ransomware Victim: www[.]newyjh[.]com - https://www.redpacketsecurity.com/ulose-ransomware-victim-www-newyjh-com/
RedPacket Security
[ULOSE] - Ransomware Victim: www[.]newyjh[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SILENTRANSOMGROUP] - Ransomware Victim: S[.][.][.]d - https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-s-d/
RedPacket Security
[SILENTRANSOMGROUP] - Ransomware Victim: S[.][.][.]d - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Edcon - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-edcon/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Edcon - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Agospap - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-agospap/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Agospap - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SAFEPAY] - Ransomware Victim: manno[.]ch - https://www.redpacketsecurity.com/safepay-ransomware-victim-manno-ch/
RedPacket Security
[SAFEPAY] - Ransomware Victim: manno[.]ch - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BRAINCIPHER] - Ransomware Victim: mccordclaims[.]com - https://www.redpacketsecurity.com/braincipher-ransomware-victim-mccordclaims-com/
RedPacket Security
[BRAINCIPHER] - Ransomware Victim: mccordclaims[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating