[QILIN] - Ransomware Victim: Unident Group - https://www.redpacketsecurity.com/qilin-ransomware-victim-unident-group/
RedPacket Security
[QILIN] - Ransomware Victim: Unident Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Emser - https://www.redpacketsecurity.com/qilin-ransomware-victim-emser/
RedPacket Security
[QILIN] - Ransomware Victim: Emser - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement-codec-yalguun-tumenkhuu - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement-codec-yalguun-tumenkhuu/
RedPacket Security
HackerOne Bug Bounty Disclosure: libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement…
CompanyMariaDB
CVE Alert: CVE-2026-105212 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105212-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105212 - zitadel - zitadel - RedPacket Security
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other
CVE Alert: CVE-2026-105210 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105210-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105210 - zitadel - zitadel - RedPacket Security
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and
CVE Alert: CVE-2026-105158 - RainyGao - DocSys - https://www.redpacketsecurity.com/cve-alert-cve-2026-105158-rainygao-docsys/
RedPacket Security
CVE Alert: CVE-2026-105158 - RainyGao - DocSys - RedPacket Security
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file
CVE Alert: CVE-2026-105211 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105211-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105211 - zitadel - zitadel - RedPacket Security
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP
CVE Alert: CVE-2026-105208 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105208-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105208 - zitadel - zitadel - RedPacket Security
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper
CVE Alert: CVE-2026-105216 - micro - go-micro - https://www.redpacketsecurity.com/cve-alert-cve-2026-105216-micro-go-micro/
RedPacket Security
CVE Alert: CVE-2026-105216 - micro - go-micro - RedPacket Security
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS
CVE Alert: CVE-2026-105218 - go-pay - gopay - https://www.redpacketsecurity.com/cve-alert-cve-2026-105218-go-pay-gopay/
RedPacket Security
CVE Alert: CVE-2026-105218 - go-pay - gopay - RedPacket Security
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate
CVE Alert: CVE-2026-105213 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105213-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105213 - zitadel - zitadel - RedPacket Security
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users
CVE Alert: CVE-2026-105089 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105089-wwbn-avideo/
RedPacket Security
CVE Alert: CVE-2026-105089 - WWBN - AVideo - RedPacket Security
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a
CVE Alert: CVE-2026-105086 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105086-wwbn-avideo/
RedPacket Security
CVE Alert: CVE-2026-105086 - WWBN - AVideo - RedPacket Security
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting
CVE Alert: CVE-2026-105219 - mwilliamson - mammoth.js - https://www.redpacketsecurity.com/cve-alert-cve-2026-105219-mwilliamson-mammoth-js/
RedPacket Security
CVE Alert: CVE-2026-105219 - mwilliamson - mammoth.js - RedPacket Security
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due
Sliver C2 Detected - 89[.]106[.]83[.]214:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-89-106-83-214-port-31337/
RedPacket Security
Sliver C2 Detected - 89[.]106[.]83[.]214:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 45[.]130[.]167[.]184:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-45-130-167-184-port-31337/
RedPacket Security
Sliver C2 Detected - 45[.]130[.]167[.]184:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 46[.]19[.]140[.]40:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-46-19-140-40-port-31337/
RedPacket Security
Sliver C2 Detected - 46[.]19[.]140[.]40:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 68[.]183[.]144[.]101:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-68-183-144-101-port-31337/
RedPacket Security
Sliver C2 Detected - 68[.]183[.]144[.]101:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 45[.]8[.]46[.]209:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-45-8-46-209-port-31337/
RedPacket Security
Sliver C2 Detected - 45[.]8[.]46[.]209:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 82[.]25[.]63[.]33:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-82-25-63-33-port-31337/
RedPacket Security
Sliver C2 Detected - 82[.]25[.]63[.]33:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 152[.]42[.]207[.]101:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-152-42-207-101-port-31337/
RedPacket Security
Sliver C2 Detected - 152[.]42[.]207[.]101:31337 - RedPacket Security
Covenant C2 Detection Alerts