[THEGENTLEMEN] - Ransomware Victim: Aware - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-aware/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Aware - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: The Official Collegeof Architects of León (COAL) - https://www.redpacketsecurity.com/akira-ransomware-victim-the-official-collegeof-architects-of-leon-coal/
RedPacket Security
[AKIRA] - Ransomware Victim: The Official Collegeof Architects of León (COAL) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Hospital de la Santa Creu i Sant Pau - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-hospital-de-la-santa-creu-i-sant-pau/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Hospital de la Santa Creu i Sant Pau - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: Allied Machine & Engineering - https://www.redpacketsecurity.com/storm-ransomware-victim-allied-machine-engineering/
RedPacket Security
[STORM] - Ransomware Victim: Allied Machine & Engineering - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Zelham - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-zelham/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Zelham - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Westrop Primary & Nursery School - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-westrop-primary-nursery-school/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Westrop Primary & Nursery School - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: States Industries - https://www.redpacketsecurity.com/storm-ransomware-victim-states-industries/
RedPacket Security
[STORM] - Ransomware Victim: States Industries - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Rotamac - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-rotamac/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Rotamac - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: Step By Step - https://www.redpacketsecurity.com/storm-ransomware-victim-step-by-step/
RedPacket Security
[STORM] - Ransomware Victim: Step By Step - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Mandurah State Emergency Service - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-mandurah-state-emergency-service/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Mandurah State Emergency Service - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Gerrity Stone - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-gerrity-stone/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Gerrity Stone - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: WOOSHIN SAFETY SYSTEMS CO LTD - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-wooshin-safety-systems-co-ltd/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: WOOSHIN SAFETY SYSTEMS CO LTD - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Active Exploitation of Vulnerability in Roundcube Webmail - https://www.redpacketsecurity.com/csa-gov-sg-active-exploitation-of-vulnerability-in-roundcube-webmail-03-10-2026/
RedPacket Security
Active Exploitation of Vulnerability in Roundcube Webmail - RedPacket Security
3 October 2026
CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - https://www.redpacketsecurity.com/cve-alert-cve-2014-125130-damjan-codeart-google-mp3-audio-player/
RedPacket Security
CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - RedPacket Security
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability
CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-85215-gg-soft-software-services-inc-paperwork/
RedPacket Security
CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - RedPacket Security
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL
CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-104637-onetwothreeneth-hospitalmanagementsystem/
RedPacket Security
CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - RedPacket Security
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the
CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - https://www.redpacketsecurity.com/cve-alert-cve-2026-104988-red-hat-red-hat-certificate-system-10/
RedPacket Security
CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - RedPacket Security
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via
CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - https://www.redpacketsecurity.com/cve-alert-cve-2026-93875-crocoblock-jetappointment/
RedPacket Security
CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - RedPacket Security
The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including,
CVE Alert: CVE-2026-104478 - getformwork - formwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-104478-getformwork-formwork/
RedPacket Security
CVE Alert: CVE-2026-104478 - getformwork - formwork - RedPacket Security
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files.
CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - https://www.redpacketsecurity.com/cve-alert-cve-2026-82039-utmstack-utmstack/
RedPacket Security
CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - RedPacket Security
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject
CVE Alert: CVE-2026-104991 - Alanaktion - phproject - https://www.redpacketsecurity.com/cve-alert-cve-2026-104991-alanaktion-phproject/
RedPacket Security
CVE Alert: CVE-2026-104991 - Alanaktion - phproject - RedPacket Security
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments,