[THEGENTLEMEN] - Ransomware Victim: Westrop Primary & Nursery School - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-westrop-primary-nursery-school/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Westrop Primary & Nursery School - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: States Industries - https://www.redpacketsecurity.com/storm-ransomware-victim-states-industries/
RedPacket Security
[STORM] - Ransomware Victim: States Industries - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Rotamac - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-rotamac/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Rotamac - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: Step By Step - https://www.redpacketsecurity.com/storm-ransomware-victim-step-by-step/
RedPacket Security
[STORM] - Ransomware Victim: Step By Step - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Mandurah State Emergency Service - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-mandurah-state-emergency-service/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Mandurah State Emergency Service - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Gerrity Stone - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-gerrity-stone/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Gerrity Stone - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: WOOSHIN SAFETY SYSTEMS CO LTD - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-wooshin-safety-systems-co-ltd/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: WOOSHIN SAFETY SYSTEMS CO LTD - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Active Exploitation of Vulnerability in Roundcube Webmail - https://www.redpacketsecurity.com/csa-gov-sg-active-exploitation-of-vulnerability-in-roundcube-webmail-03-10-2026/
RedPacket Security
Active Exploitation of Vulnerability in Roundcube Webmail - RedPacket Security
3 October 2026
CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - https://www.redpacketsecurity.com/cve-alert-cve-2014-125130-damjan-codeart-google-mp3-audio-player/
RedPacket Security
CVE Alert: CVE-2014-125130 - Damjan - CodeArt Google MP3 Audio Player - RedPacket Security
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability
CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-85215-gg-soft-software-services-inc-paperwork/
RedPacket Security
CVE Alert: CVE-2026-85215 - GG Soft Software Services Inc. - Paperwork - RedPacket Security
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL
CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-104637-onetwothreeneth-hospitalmanagementsystem/
RedPacket Security
CVE Alert: CVE-2026-104637 - onetwothreeneth - HospitalManagementSystem - RedPacket Security
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the
CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - https://www.redpacketsecurity.com/cve-alert-cve-2026-104988-red-hat-red-hat-certificate-system-10/
RedPacket Security
CVE Alert: CVE-2026-104988 - Red Hat - Red Hat Certificate System 10 - RedPacket Security
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via
CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - https://www.redpacketsecurity.com/cve-alert-cve-2026-93875-crocoblock-jetappointment/
RedPacket Security
CVE Alert: CVE-2026-93875 - Crocoblock - JetAppointment - RedPacket Security
The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including,
CVE Alert: CVE-2026-104478 - getformwork - formwork - https://www.redpacketsecurity.com/cve-alert-cve-2026-104478-getformwork-formwork/
RedPacket Security
CVE Alert: CVE-2026-104478 - getformwork - formwork - RedPacket Security
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files.
CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - https://www.redpacketsecurity.com/cve-alert-cve-2026-82039-utmstack-utmstack/
RedPacket Security
CVE Alert: CVE-2026-82039 - UTMStack - UTMStack - RedPacket Security
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject
CVE Alert: CVE-2026-104991 - Alanaktion - phproject - https://www.redpacketsecurity.com/cve-alert-cve-2026-104991-alanaktion-phproject/
RedPacket Security
CVE Alert: CVE-2026-104991 - Alanaktion - phproject - RedPacket Security
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments,
CVE Alert: CVE-2026-82044 - UTMStack - UTMStack - https://www.redpacketsecurity.com/cve-alert-cve-2026-82044-utmstack-utmstack/
RedPacket Security
CVE Alert: CVE-2026-82044 - UTMStack - UTMStack - RedPacket Security
UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal
CVE Alert: CVE-2026-104433 - kvcache-ai - Mooncake - https://www.redpacketsecurity.com/cve-alert-cve-2026-104433-kvcache-ai-mooncake/
RedPacket Security
CVE Alert: CVE-2026-104433 - kvcache-ai - Mooncake - RedPacket Security
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated
CVE Alert: CVE-2026-96270 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin - https://www.redpacketsecurity.com/cve-alert-cve-2026-96270-ultimatemember-ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin/
RedPacket Security
CVE Alert: CVE-2026-96270 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction…
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to
CVE Alert: CVE-2026-93428 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin - https://www.redpacketsecurity.com/cve-alert-cve-2026-93428-ultimatemember-ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin/
RedPacket Security
CVE Alert: CVE-2026-93428 - ultimatemember - Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction…
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to
CVE Alert: CVE-2026-92977 - devowl - Real Cookie Banner: GDPR & ePrivacy Cookie Consent - https://www.redpacketsecurity.com/cve-alert-cve-2026-92977-devowl-real-cookie-banner-gdpr-eprivacy-cookie-consent/
RedPacket Security
CVE Alert: CVE-2026-92977 - devowl - Real Cookie Banner: GDPR & ePrivacy Cookie Consent - RedPacket Security
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up