[KRYBIT] - Ransomware Victim: DISK PRECISION GROUP - diskprecision[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-disk-precision-group-diskprecision-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: DISK PRECISION GROUP - diskprecision[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: steelco - https://www.redpacketsecurity.com/auditteam-ransomware-victim-steelco/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: steelco - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P[.]C - https://www.redpacketsecurity.com/booba-project-ransomware-victim-associated-gastroenterologists-of-central-new-york-p-c/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P[.]C - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BOOBA PROJECT] - Ransomware Victim: FUNAP - Fundação "Prof[.] Dr[.] Manoel Pedro Pimentel" - https://www.redpacketsecurity.com/booba-project-ransomware-victim-funap-fundacao-prof-dr-manoel-pedro-pimentel/
RedPacket Security
[BOOBA PROJECT] - Ransomware Victim: FUNAP - Fundação "Prof[.] Dr[.] Manoel Pedro Pimentel" - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: ProMind IT - https://www.redpacketsecurity.com/auditteam-ransomware-victim-promind-it/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: ProMind IT - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank/
RedPacket Security
HackerOne Bug Bounty Disclosure: idor-allows-user-to-access-report-details-via-reference-json-endpoint-sm-ldrag-n-mbbank - RedPacket…
CompanyHackerOne
HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration--dha - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha-2/
RedPacket Security
HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha - RedPacket Security
CompanyNextcloud
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-15983-webrehab-super-forms-drag-drop-form-builder/
RedPacket Security
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - RedPacket Security
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including,
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-97661-scottpaterson-business-essentials-for-contact-form-7/
RedPacket Security
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - RedPacket Security
The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to,
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-85235-wpmudev-forminator-forms-contact-form-payment-form-custom-form-builder/
RedPacket Security
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - RedPacket Security
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-95687-wpclever-wpc-shop-as-a-customer-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - RedPacket Security
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96813-10web-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder/
RedPacket Security
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - RedPacket Security
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on
CVE Alert: CVE-2026-103246 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103246-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103246 - n8n-io - n8n - RedPacket Security
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference
CVE Alert: CVE-2026-103250 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103250-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103250 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node
CVE Alert: CVE-2026-103247 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103247-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103247 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - https://www.redpacketsecurity.com/kairos-ransomware-victim-slate-valley-unified-school-district/
RedPacket Security
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-91-199-32-35-port-31337/
RedPacket Security
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 159[.]89[.]28[.]205:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-159-89-28-205-port-31337/
RedPacket Security
Sliver C2 Detected - 159[.]89[.]28[.]205:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 147[.]50[.]242[.]137:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-147-50-242-137-port-31337/
RedPacket Security
Sliver C2 Detected - 147[.]50[.]242[.]137:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 101[.]42[.]108[.]164:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-101-42-108-164-port-31337/
RedPacket Security
Sliver C2 Detected - 101[.]42[.]108[.]164:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 207[.]148[.]73[.]17:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-207-148-73-17-port-31337/
RedPacket Security
Sliver C2 Detected - 207[.]148[.]73[.]17:31337 - RedPacket Security
Covenant C2 Detection Alerts