CVE Alert: CVE-2026-105208 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105208-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105208 - zitadel - zitadel - RedPacket Security
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper
CVE Alert: CVE-2026-105216 - micro - go-micro - https://www.redpacketsecurity.com/cve-alert-cve-2026-105216-micro-go-micro/
RedPacket Security
CVE Alert: CVE-2026-105216 - micro - go-micro - RedPacket Security
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS
CVE Alert: CVE-2026-105218 - go-pay - gopay - https://www.redpacketsecurity.com/cve-alert-cve-2026-105218-go-pay-gopay/
RedPacket Security
CVE Alert: CVE-2026-105218 - go-pay - gopay - RedPacket Security
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate
CVE Alert: CVE-2026-105213 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105213-zitadel-zitadel/
RedPacket Security
CVE Alert: CVE-2026-105213 - zitadel - zitadel - RedPacket Security
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users
CVE Alert: CVE-2026-105089 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105089-wwbn-avideo/
RedPacket Security
CVE Alert: CVE-2026-105089 - WWBN - AVideo - RedPacket Security
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a
CVE Alert: CVE-2026-105086 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105086-wwbn-avideo/
RedPacket Security
CVE Alert: CVE-2026-105086 - WWBN - AVideo - RedPacket Security
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting
CVE Alert: CVE-2026-105219 - mwilliamson - mammoth.js - https://www.redpacketsecurity.com/cve-alert-cve-2026-105219-mwilliamson-mammoth-js/
RedPacket Security
CVE Alert: CVE-2026-105219 - mwilliamson - mammoth.js - RedPacket Security
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due
Sliver C2 Detected - 89[.]106[.]83[.]214:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-89-106-83-214-port-31337/
RedPacket Security
Sliver C2 Detected - 89[.]106[.]83[.]214:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 45[.]130[.]167[.]184:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-45-130-167-184-port-31337/
RedPacket Security
Sliver C2 Detected - 45[.]130[.]167[.]184:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 46[.]19[.]140[.]40:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-46-19-140-40-port-31337/
RedPacket Security
Sliver C2 Detected - 46[.]19[.]140[.]40:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 68[.]183[.]144[.]101:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-68-183-144-101-port-31337/
RedPacket Security
Sliver C2 Detected - 68[.]183[.]144[.]101:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 45[.]8[.]46[.]209:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-45-8-46-209-port-31337/
RedPacket Security
Sliver C2 Detected - 45[.]8[.]46[.]209:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 82[.]25[.]63[.]33:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-82-25-63-33-port-31337/
RedPacket Security
Sliver C2 Detected - 82[.]25[.]63[.]33:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 152[.]42[.]207[.]101:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-152-42-207-101-port-31337/
RedPacket Security
Sliver C2 Detected - 152[.]42[.]207[.]101:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 137[.]184[.]126[.]9:31337 - https://www.redpacketsecurity.com/sliver-c2-detected-137-184-126-9-port-31337/
RedPacket Security
Sliver C2 Detected - 137[.]184[.]126[.]9:31337 - RedPacket Security
Covenant C2 Detection Alerts
Sliver C2 Detected - 154[.]219[.]114[.]14:8443 - https://www.redpacketsecurity.com/sliver-c2-detected-154-219-114-14-port-8443/
RedPacket Security
Sliver C2 Detected - 154[.]219[.]114[.]14:8443 - RedPacket Security
Covenant C2 Detection Alerts
CVE Alert: CVE-2026-105220 - klembot - twinejs - https://www.redpacketsecurity.com/cve-alert-cve-2026-105220-klembot-twinejs/
RedPacket Security
CVE Alert: CVE-2026-105220 - klembot - twinejs - RedPacket Security
Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor
CVE Alert: CVE-2026-105166 - kishor-23 - food-waste-management-system - https://www.redpacketsecurity.com/cve-alert-cve-2026-105166-kishor-23-food-waste-management-system/
RedPacket Security
CVE Alert: CVE-2026-105166 - kishor-23 - food-waste-management-system - RedPacket Security
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The
CVE Alert: CVE-2026-105167 - kishor-23 - food-waste-management-system - https://www.redpacketsecurity.com/cve-alert-cve-2026-105167-kishor-23-food-waste-management-system/
RedPacket Security
CVE Alert: CVE-2026-105167 - kishor-23 - food-waste-management-system - RedPacket Security
A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c.
GoPhish Login Page Detected - 217[.]61[.]240[.]137:9205 - https://www.redpacketsecurity.com/gophish-login-detected-217-61-240-137-port-9205/
RedPacket Security
GoPhish Login Page Detected - 217[.]61[.]240[.]137:9205 - RedPacket Security
GoPhish Login Page Detection Alerts
GoPhish Login Page Detected - 95[.]135[.]181[.]94:3333 - https://www.redpacketsecurity.com/gophish-login-detected-95-135-181-94-port-3333/
RedPacket Security
GoPhish Login Page Detected - 95[.]135[.]181[.]94:3333 - RedPacket Security
GoPhish Login Page Detection Alerts