[AKIRA] - Ransomware Victim: Wesmar - https://www.redpacketsecurity.com/akira-ransomware-victim-wesmar/
RedPacket Security
[AKIRA] - Ransomware Victim: Wesmar - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: C*ro *nty *es - https://www.redpacketsecurity.com/nightspire-ransomware-victim-c-ro-nty-es/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: C*ro *nty *es - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[MORPHEUS] - Ransomware Victim: Superior Plating Technology CO - https://www.redpacketsecurity.com/morpheus-ransomware-victim-superior-plating-technology-co/
RedPacket Security
[MORPHEUS] - Ransomware Victim: Superior Plating Technology CO - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: DPL Group - https://www.redpacketsecurity.com/akira-ransomware-victim-dpl-group/
RedPacket Security
[AKIRA] - Ransomware Victim: DPL Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: DISK PRECISION GROUP - diskprecision[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-disk-precision-group-diskprecision-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: DISK PRECISION GROUP - diskprecision[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: steelco - https://www.redpacketsecurity.com/auditteam-ransomware-victim-steelco/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: steelco - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P[.]C - https://www.redpacketsecurity.com/booba-project-ransomware-victim-associated-gastroenterologists-of-central-new-york-p-c/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P[.]C - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: FUNAP - Fundação "Prof[.] Dr[.] Manoel Pedro Pimentel" - https://www.redpacketsecurity.com/booba-project-ransomware-victim-funap-fundacao-prof-dr-manoel-pedro-pimentel/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: FUNAP - Fundação "Prof[.] Dr[.] Manoel Pedro Pimentel" - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: ProMind IT - https://www.redpacketsecurity.com/auditteam-ransomware-victim-promind-it/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: ProMind IT - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank/
RedPacket Security
HackerOne Bug Bounty Disclosure: idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank - RedPacket…
CompanyHackerOne
HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration--dha - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha-2/
RedPacket Security
HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha - RedPacket Security
CompanyNextcloud
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-15983-webrehab-super-forms-drag-drop-form-builder/
RedPacket Security
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - RedPacket Security
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including,
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-97661-scottpaterson-business-essentials-for-contact-form-7/
RedPacket Security
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - RedPacket Security
The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to,
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-85235-wpmudev-forminator-forms-contact-form-payment-form-custom-form-builder/
RedPacket Security
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - RedPacket Security
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-95687-wpclever-wpc-shop-as-a-customer-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - RedPacket Security
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96813-10web-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder/
RedPacket Security
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - RedPacket Security
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on
CVE Alert: CVE-2026-103246 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103246-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103246 - n8n-io - n8n - RedPacket Security
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference
CVE Alert: CVE-2026-103250 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103250-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103250 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node
CVE Alert: CVE-2026-103247 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103247-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103247 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - https://www.redpacketsecurity.com/kairos-ransomware-victim-slate-valley-unified-school-district/
RedPacket Security
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-91-199-32-35-port-31337/
RedPacket Security
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - RedPacket Security
Covenant C2 Detection Alerts