CVE Alert: CVE-2026-92820 - SaturdayDrive - Ninja Forms - File Uploads - https://www.redpacketsecurity.com/cve-alert-cve-2026-92820-saturdaydrive-ninja-forms-file-uploads/
RedPacket Security
CVE Alert: CVE-2026-92820 - SaturdayDrive - Ninja Forms - File Uploads - RedPacket Security
The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external
CVE Alert: CVE-2026-102565 - bookingalgorithms - BA Book Everything - https://www.redpacketsecurity.com/cve-alert-cve-2026-102565-bookingalgorithms-ba-book-everything/
RedPacket Security
CVE Alert: CVE-2026-102565 - bookingalgorithms - BA Book Everything - RedPacket Security
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and
CVE Alert: CVE-2026-102772 - jtsternberg - CMB2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-102772-jtsternberg-cmb2/
RedPacket Security
CVE Alert: CVE-2026-102772 - jtsternberg - CMB2 - RedPacket Security
The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_code, kl_post_code)' parameter in
[QILIN] - Ransomware Victim: Inova Semiconductors GmbH - https://www.redpacketsecurity.com/qilin-ransomware-victim-inova-semiconductors-gmbh/
RedPacket Security
[QILIN] - Ransomware Victim: Inova Semiconductors GmbH - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: Pacific Tank Lines - https://www.redpacketsecurity.com/akira-ransomware-victim-pacific-tank-lines/
RedPacket Security
[AKIRA] - Ransomware Victim: Pacific Tank Lines - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CovenantC2 Detected - 77[.]241[.]196[.]163:7443 - https://www.redpacketsecurity.com/covenant-c2-detected-77-241-196-163-port-7443/
RedPacket Security
CovenantC2 Detected - 77[.]241[.]196[.]163:7443 - RedPacket Security
Covenant C2 Detection Alerts
[AUDITTEAM] - Ransomware Victim: Ad***ng - https://www.redpacketsecurity.com/auditteam-ransomware-victim-ad-ng/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: Ad***ng - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: Jampac Alimentos - https://www.redpacketsecurity.com/akira-ransomware-victim-jampac-alimentos/
RedPacket Security
[AKIRA] - Ransomware Victim: Jampac Alimentos - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: The Official College of Architects of León (COAL) - https://www.redpacketsecurity.com/akira-ransomware-victim-the-official-college-of-architects-of-leon-coal/
RedPacket Security
[AKIRA] - Ransomware Victim: The Official College of Architects of León (COAL) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination-and-unattached-active-storage-html-pirikara - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination-and-unattached-active-storage-html-pirikara/
RedPacket Security
HackerOne Bug Bounty Disclosure: one-click-cross-account-javascript-execution-steals-a-victim-write-token-through-turbo-pagination…
CompanyBasecamp
[RHYSIDA] - Ransomware Victim: Electro Heat Sweden AB - https://www.redpacketsecurity.com/rhysida-ransomware-victim-electro-heat-sweden-ab/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Electro Heat Sweden AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PANZER] - Ransomware Victim: Paessolucoes - https://www.redpacketsecurity.com/panzer-ransomware-victim-paessolucoes/
RedPacket Security
[PANZER] - Ransomware Victim: Paessolucoes - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Sports Events365 - https://www.redpacketsecurity.com/qilin-ransomware-victim-sports-events365/
RedPacket Security
[QILIN] - Ransomware Victim: Sports Events365 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: hollypoultry[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-hollypoultry-com/
RedPacket Security
[SETTRA] - Ransomware Victim: hollypoultry[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SETTRA] - Ransomware Victim: www[.]windor[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-www-windor-com/
RedPacket Security
[SETTRA] - Ransomware Victim: www[.]windor[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-102490 - Zammad GmbH - Zammad - https://www.redpacketsecurity.com/cve-alert-cve-2026-102490-zammad-gmbh-zammad/
RedPacket Security
CVE Alert: CVE-2026-102490 - Zammad GmbH - Zammad - RedPacket Security
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
CVE Alert: CVE-2026-102489 - Zammad GmbH - Zammad - https://www.redpacketsecurity.com/cve-alert-cve-2026-102489-zammad-gmbh-zammad/
RedPacket Security
CVE Alert: CVE-2026-102489 - Zammad GmbH - Zammad - RedPacket Security
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8888 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-152-136-253-101-port-8888-2/
RedPacket Security
Cobalt Strike Beacon Detected - 152[.]136[.]253[.]101:8888 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 43[.]138[.]116[.]60:8443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-43-138-116-60-port-8443-2/
RedPacket Security
Cobalt Strike Beacon Detected - 43[.]138[.]116[.]60:8443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 49[.]232[.]21[.]222:8081 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-49-232-21-222-port-8081/
RedPacket Security
Cobalt Strike Beacon Detected - 49[.]232[.]21[.]222:8081 - RedPacket Security
Cobalt Strike Beacon Detection Alerts
Cobalt Strike Beacon Detected - 120[.]76[.]143[.]184:8899 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-120-76-143-184-port-8899-13/
RedPacket Security
Cobalt Strike Beacon Detected - 120[.]76[.]143[.]184:8899 - RedPacket Security
Cobalt Strike Beacon Detection Alerts