CVE Alert: CVE-2026-87091 - uscnanbu - Welcart e-Commerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-87091-uscnanbu-welcart-e-commerce/
RedPacket Security
CVE Alert: CVE-2026-87091 - uscnanbu - Welcart e-Commerce - RedPacket Security
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and
CVE Alert: CVE-2026-101928 - magicplugins - Magic Tooltips For Contact Form 7 - https://www.redpacketsecurity.com/cve-alert-cve-2026-101928-magicplugins-magic-tooltips-for-contact-form-7/
RedPacket Security
CVE Alert: CVE-2026-101928 - magicplugins - Magic Tooltips For Contact Form 7 - RedPacket Security
The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and
CVE Alert: CVE-2026-101923 - villatheme - Photo Reviews for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-101923-villatheme-photo-reviews-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-101923 - villatheme - Photo Reviews for WooCommerce - RedPacket Security
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is due to
CVE Alert: CVE-2026-93430 - gdragon - GD Rating System - https://www.redpacketsecurity.com/cve-alert-cve-2026-93430-gdragon-gd-rating-system/
RedPacket Security
CVE Alert: CVE-2026-93430 - gdragon - GD Rating System - RedPacket Security
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all
CVE Alert: CVE-2026-96575 - ivijanstefan - Transliterator – Multilingual and Multi-script Text Conversion - https://www.redpacketsecurity.com/cve-alert-cve-2026-96575-ivijanstefan-transliterator-multilingual-and-multi-script-text-conversion/
RedPacket Security
CVE Alert: CVE-2026-96575 - ivijanstefan - Transliterator – Multilingual and Multi-script Text Conversion - RedPacket Security
The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via
CVE Alert: CVE-2026-96564 - rainbowgeek - SEOPress – AI SEO Plugin & On-site SEO - https://www.redpacketsecurity.com/cve-alert-cve-2026-96564-rainbowgeek-seopress-ai-seo-plugin-on-site-seo/
RedPacket Security
CVE Alert: CVE-2026-96564 - rainbowgeek - SEOPress – AI SEO Plugin & On-site SEO - RedPacket Security
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author Display Name in all versions up
[QILIN] - Ransomware Victim: Genesis Credit Management - https://www.redpacketsecurity.com/qilin-ransomware-victim-genesis-credit-management/
RedPacket Security
[QILIN] - Ransomware Victim: Genesis Credit Management - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NETRUNNER] - Ransomware Victim: Precon Marine Inc - https://www.redpacketsecurity.com/netrunner-ransomware-victim-precon-marine-inc/
RedPacket Security
[NETRUNNER] - Ransomware Victim: Precon Marine Inc - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[RHYSIDA] - Ransomware Victim: Skaff Group - https://www.redpacketsecurity.com/rhysida-ransomware-victim-skaff-group/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Skaff Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: path-traversal-in-mbstream-extract-riley-scott-jacob - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-path-traversal-in-mbstream-extract-riley-scott-jacob/
RedPacket Security
HackerOne Bug Bounty Disclosure: path-traversal-in-mbstream-extract-riley-scott-jacob - RedPacket Security
CompanyMariaDB
CVE Alert: CVE-2026-105115 - OpenIdentityPlatform - OpenAM - https://www.redpacketsecurity.com/cve-alert-cve-2026-105115-openidentityplatform-openam/
RedPacket Security
CVE Alert: CVE-2026-105115 - OpenIdentityPlatform - OpenAM - RedPacket Security
OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers
CVE Alert: CVE-2026-105123 - vincent-peugnet - wcms - https://www.redpacketsecurity.com/cve-alert-cve-2026-105123-vincent-peugnet-wcms/
RedPacket Security
CVE Alert: CVE-2026-105123 - vincent-peugnet - wcms - RedPacket Security
W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing
CVE Alert: CVE-2026-105126 - laradashboard - laradashboard - https://www.redpacketsecurity.com/cve-alert-cve-2026-105126-laradashboard-laradashboard/
RedPacket Security
CVE Alert: CVE-2026-105126 - laradashboard - laradashboard - RedPacket Security
LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing
Weekly Ransomware Intelligence Report: 27 September 2026 to 4 October 2026 - https://www.redpacketsecurity.com/weekly-ransomware-intelligence-report-2026-09-27-2026-10-04/
RedPacket Security
Weekly Ransomware Intelligence Report: 27 September 2026 to 4 October 2026 - RedPacket Security
Ransomware activity at a glance
CVE Alert: CVE-2026-105133 - Ahsay - AhsayCBS - https://www.redpacketsecurity.com/cve-alert-cve-2026-105133-ahsay-ahsaycbs/
RedPacket Security
CVE Alert: CVE-2026-105133 - Ahsay - AhsayCBS - RedPacket Security
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the
CVE Alert: CVE-2026-105147 - SciPhi-AI - R2R - https://www.redpacketsecurity.com/cve-alert-cve-2026-105147-sciphi-ai-r2r/
RedPacket Security
CVE Alert: CVE-2026-105147 - SciPhi-AI - R2R - RedPacket Security
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the
CVE Alert: CVE-2026-105148 - SciPhi-AI - R2R - https://www.redpacketsecurity.com/cve-alert-cve-2026-105148-sciphi-ai-r2r/
RedPacket Security
CVE Alert: CVE-2026-105148 - SciPhi-AI - R2R - RedPacket Security
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the
CVE Alert: CVE-2026-105149 - n/a - mooSocial - https://www.redpacketsecurity.com/cve-alert-cve-2026-105149-n-a-moosocial/
RedPacket Security
CVE Alert: CVE-2026-105149 - n/a - mooSocial - RedPacket Security
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a
[PAYOUTSKING] - Ransomware Victim: M****C - https://www.redpacketsecurity.com/payoutsking-ransomware-victim-m-c/
RedPacket Security
[PAYOUTSKING] - Ransomware Victim: M****C - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DIREWOLF] - Ransomware Victim: Softruck - https://www.redpacketsecurity.com/direwolf-ransomware-victim-softruck/
RedPacket Security
[DIREWOLF] - Ransomware Victim: Softruck - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: euroditel[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-euroditel-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: euroditel[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating