CVE Alert: CVE-2026-93430 - gdragon - GD Rating System - https://www.redpacketsecurity.com/cve-alert-cve-2026-93430-gdragon-gd-rating-system/
RedPacket Security
CVE Alert: CVE-2026-93430 - gdragon - GD Rating System - RedPacket Security
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all
CVE Alert: CVE-2026-96575 - ivijanstefan - Transliterator – Multilingual and Multi-script Text Conversion - https://www.redpacketsecurity.com/cve-alert-cve-2026-96575-ivijanstefan-transliterator-multilingual-and-multi-script-text-conversion/
RedPacket Security
CVE Alert: CVE-2026-96575 - ivijanstefan - Transliterator – Multilingual and Multi-script Text Conversion - RedPacket Security
The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via
CVE Alert: CVE-2026-96564 - rainbowgeek - SEOPress – AI SEO Plugin & On-site SEO - https://www.redpacketsecurity.com/cve-alert-cve-2026-96564-rainbowgeek-seopress-ai-seo-plugin-on-site-seo/
RedPacket Security
CVE Alert: CVE-2026-96564 - rainbowgeek - SEOPress – AI SEO Plugin & On-site SEO - RedPacket Security
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author Display Name in all versions up
[QILIN] - Ransomware Victim: Genesis Credit Management - https://www.redpacketsecurity.com/qilin-ransomware-victim-genesis-credit-management/
RedPacket Security
[QILIN] - Ransomware Victim: Genesis Credit Management - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NETRUNNER] - Ransomware Victim: Precon Marine Inc - https://www.redpacketsecurity.com/netrunner-ransomware-victim-precon-marine-inc/
RedPacket Security
[NETRUNNER] - Ransomware Victim: Precon Marine Inc - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[RHYSIDA] - Ransomware Victim: Skaff Group - https://www.redpacketsecurity.com/rhysida-ransomware-victim-skaff-group/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Skaff Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: path-traversal-in-mbstream-extract-riley-scott-jacob - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-path-traversal-in-mbstream-extract-riley-scott-jacob/
RedPacket Security
HackerOne Bug Bounty Disclosure: path-traversal-in-mbstream-extract-riley-scott-jacob - RedPacket Security
CompanyMariaDB
CVE Alert: CVE-2026-105115 - OpenIdentityPlatform - OpenAM - https://www.redpacketsecurity.com/cve-alert-cve-2026-105115-openidentityplatform-openam/
RedPacket Security
CVE Alert: CVE-2026-105115 - OpenIdentityPlatform - OpenAM - RedPacket Security
OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers
CVE Alert: CVE-2026-105123 - vincent-peugnet - wcms - https://www.redpacketsecurity.com/cve-alert-cve-2026-105123-vincent-peugnet-wcms/
RedPacket Security
CVE Alert: CVE-2026-105123 - vincent-peugnet - wcms - RedPacket Security
W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing
CVE Alert: CVE-2026-105126 - laradashboard - laradashboard - https://www.redpacketsecurity.com/cve-alert-cve-2026-105126-laradashboard-laradashboard/
RedPacket Security
CVE Alert: CVE-2026-105126 - laradashboard - laradashboard - RedPacket Security
LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing
Weekly Ransomware Intelligence Report: 27 September 2026 to 4 October 2026 - https://www.redpacketsecurity.com/weekly-ransomware-intelligence-report-2026-09-27-2026-10-04/
RedPacket Security
Weekly Ransomware Intelligence Report: 27 September 2026 to 4 October 2026 - RedPacket Security
Ransomware activity at a glance
CVE Alert: CVE-2026-105133 - Ahsay - AhsayCBS - https://www.redpacketsecurity.com/cve-alert-cve-2026-105133-ahsay-ahsaycbs/
RedPacket Security
CVE Alert: CVE-2026-105133 - Ahsay - AhsayCBS - RedPacket Security
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the
CVE Alert: CVE-2026-105147 - SciPhi-AI - R2R - https://www.redpacketsecurity.com/cve-alert-cve-2026-105147-sciphi-ai-r2r/
RedPacket Security
CVE Alert: CVE-2026-105147 - SciPhi-AI - R2R - RedPacket Security
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the
CVE Alert: CVE-2026-105148 - SciPhi-AI - R2R - https://www.redpacketsecurity.com/cve-alert-cve-2026-105148-sciphi-ai-r2r/
RedPacket Security
CVE Alert: CVE-2026-105148 - SciPhi-AI - R2R - RedPacket Security
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the
CVE Alert: CVE-2026-105149 - n/a - mooSocial - https://www.redpacketsecurity.com/cve-alert-cve-2026-105149-n-a-moosocial/
RedPacket Security
CVE Alert: CVE-2026-105149 - n/a - mooSocial - RedPacket Security
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a
[PAYOUTSKING] - Ransomware Victim: M****C - https://www.redpacketsecurity.com/payoutsking-ransomware-victim-m-c/
RedPacket Security
[PAYOUTSKING] - Ransomware Victim: M****C - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DIREWOLF] - Ransomware Victim: Softruck - https://www.redpacketsecurity.com/direwolf-ransomware-victim-softruck/
RedPacket Security
[DIREWOLF] - Ransomware Victim: Softruck - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: euroditel[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-euroditel-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: euroditel[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: superpack[.]com[.]co - https://www.redpacketsecurity.com/krybit-ransomware-victim-superpack-com-co/
RedPacket Security
[KRYBIT] - Ransomware Victim: superpack[.]com[.]co - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Mutsumi Group - https://www.redpacketsecurity.com/qilin-ransomware-victim-mutsumi-group/
RedPacket Security
[QILIN] - Ransomware Victim: Mutsumi Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[KRYBIT] - Ransomware Victim: daralteb[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-daralteb-com/
RedPacket Security
[KRYBIT] - Ransomware Victim: daralteb[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating