HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration--dha - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha-2/
RedPacket Security
HackerOne Bug Bounty Disclosure: ssrf-via-user-controlled-push-proxyserver-in-notifications-push-registration-dha - RedPacket Security
CompanyNextcloud
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-15983-webrehab-super-forms-drag-drop-form-builder/
RedPacket Security
CVE Alert: CVE-2026-15983 - WebRehab - Super Forms – Drag & Drop Form Builder - RedPacket Security
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including,
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-97661-scottpaterson-business-essentials-for-contact-form-7/
RedPacket Security
CVE Alert: CVE-2026-97661 - scottpaterson - Business Essentials for Contact Form 7 - RedPacket Security
The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to,
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-85235-wpmudev-forminator-forms-contact-form-payment-form-custom-form-builder/
RedPacket Security
CVE Alert: CVE-2026-85235 - wpmudev - Forminator Forms – Contact Form, Payment Form & Custom Form Builder - RedPacket Security
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-95687-wpclever-wpc-shop-as-a-customer-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-95687 - wpclever - WPC Shop as a Customer for WooCommerce - RedPacket Security
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96813-10web-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder/
RedPacket Security
CVE Alert: CVE-2026-96813 - 10web - Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder - RedPacket Security
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on
CVE Alert: CVE-2026-103246 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103246-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103246 - n8n-io - n8n - RedPacket Security
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference
CVE Alert: CVE-2026-103250 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103250-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103250 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node
CVE Alert: CVE-2026-103247 - n8n-io - n8n - https://www.redpacketsecurity.com/cve-alert-cve-2026-103247-n8n-io-n8n/
RedPacket Security
CVE Alert: CVE-2026-103247 - n8n-io - n8n - RedPacket Security
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - https://www.redpacketsecurity.com/kairos-ransomware-victim-slate-valley-unified-school-district/
RedPacket Security
[KAIROS] - Ransomware Victim: Slate Valley Unified School District - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-91-199-32-35-port-31337/
RedPacket Security
Sliver C2 Detected - 91[.]199[.]32[.]35:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 159[.]89[.]28[.]205:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-159-89-28-205-port-31337/
RedPacket Security
Sliver C2 Detected - 159[.]89[.]28[.]205:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 147[.]50[.]242[.]137:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-147-50-242-137-port-31337/
RedPacket Security
Sliver C2 Detected - 147[.]50[.]242[.]137:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 101[.]42[.]108[.]164:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-101-42-108-164-port-31337/
RedPacket Security
Sliver C2 Detected - 101[.]42[.]108[.]164:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 207[.]148[.]73[.]17:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-207-148-73-17-port-31337/
RedPacket Security
Sliver C2 Detected - 207[.]148[.]73[.]17:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 51[.]178[.]49[.]164:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-51-178-49-164-port-31337/
RedPacket Security
Sliver C2 Detected - 51[.]178[.]49[.]164:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 196[.]251[.]121[.]120:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-196-251-121-120-port-31337/
RedPacket Security
Sliver C2 Detected - 196[.]251[.]121[.]120:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 152[.]67[.]199[.]142:10443 - https://www.redpacketsecurity.com/sliver-c2-detected-152-67-199-142-port-10443/
RedPacket Security
Sliver C2 Detected - 152[.]67[.]199[.]142:10443 - RedPacket Security
Covenant C2 Detection Alerts
CVE Alert: CVE-2026-103262 - tornadoweb - tornado - https://www.redpacketsecurity.com/cve-alert-cve-2026-103262-tornadoweb-tornado/
RedPacket Security
CVE Alert: CVE-2026-103262 - tornadoweb - tornado - RedPacket Security
Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of
CVE Alert: CVE-2026-103266 - TryGhost - Ghost - https://www.redpacketsecurity.com/cve-alert-cve-2026-103266-tryghost-ghost/
RedPacket Security
CVE Alert: CVE-2026-103266 - TryGhost - Ghost - RedPacket Security
Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid
CVE Alert: CVE-2024-58388 - Sharp Corporation - Multiple Multifunction Printers - https://www.redpacketsecurity.com/cve-alert-cve-2024-58388-sharp-corporation-multiple-multifunction-printers/
RedPacket Security
CVE Alert: CVE-2024-58388 - Sharp Corporation - Multiple Multifunction Printers - RedPacket Security
Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read