HackerOne Bug Bounty Disclosure: html-injection-in-contact-form-email-enables-phishing-via-legitimate-infrastructure-tenzai - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-html-injection-in-contact-form-email-enables-phishing-via-legitimate-infrastructure-tenzai/
RedPacket Security
HackerOne Bug Bounty Disclosure: html-injection-in-contact-form-email-enables-phishing-via-legitimate-infrastructure-tenzai - RedPacket…
CompanyEssity
HackerOne Bug Bounty Disclosure: client-side-denial-of-service-dos-via-memory-exhaustion-on-password-reset-endpoint-dipesh-pokhrel - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-client-side-denial-of-service-dos-via-memory-exhaustion-on-password-reset-endpoint-dipesh-pokhrel/
RedPacket Security
HackerOne Bug Bounty Disclosure: client-side-denial-of-service-dos-via-memory-exhaustion-on-password-reset-endpoint-dipesh-pokhrel…
CompanyKhan Academy
HackerOne Bug Bounty Disclosure: imap-literal-size-truncation-on-bit-platforms-corrupts-downloads-and-desynchronizes-the-response-parser-mohammed-k-fathy - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-imap-literal-size-truncation-on-bit-platforms-corrupts-downloads-and-desynchronizes-the-response-parser-mohammed-k-fathy/
RedPacket Security
HackerOne Bug Bounty Disclosure: imap-literal-size-truncation-on-bit-platforms-corrupts-downloads-and-desynchronizes-the-response…
Companycurl
HackerOne Bug Bounty Disclosure: rustls-backend-discloses-out-of-bounds-heap-data-during-legal-imap-upload-cancellation-stze - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-rustls-backend-discloses-out-of-bounds-heap-data-during-legal-imap-upload-cancellation-stze/
RedPacket Security
HackerOne Bug Bounty Disclosure: rustls-backend-discloses-out-of-bounds-heap-data-during-legal-imap-upload-cancellation-stze -…
Companycurl
[INTERLOCK] - Ransomware Victim: H&L Manufacturing - https://www.redpacketsecurity.com/interlock-ransomware-victim-h-l-manufacturing/
RedPacket Security
[INTERLOCK] - Ransomware Victim: H&L Manufacturing - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SAFEPAY] - Ransomware Victim: duhaas[.]sk - https://www.redpacketsecurity.com/safepay-ransomware-victim-duhaas-sk/
RedPacket Security
[SAFEPAY] - Ransomware Victim: duhaas[.]sk - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SAFEPAY] - Ransomware Victim: anwo[.]cl - https://www.redpacketsecurity.com/safepay-ransomware-victim-anwo-cl/
RedPacket Security
[SAFEPAY] - Ransomware Victim: anwo[.]cl - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SAFEPAY] - Ransomware Victim: ikhasas[.]com - https://www.redpacketsecurity.com/safepay-ransomware-victim-ikhasas-com/
RedPacket Security
[SAFEPAY] - Ransomware Victim: ikhasas[.]com - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[ENDZONE] - Ransomware Victim: WARNING - https://www.redpacketsecurity.com/endzone-ransomware-victim-warning/
RedPacket Security
[ENDZONE] - Ransomware Victim: WARNING - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[GLOBAL SECRET GROUP] - Ransomware Victim: Turn5 - https://www.redpacketsecurity.com/global-secret-group-ransomware-victim-turn5/
RedPacket Security
[GLOBAL SECRET GROUP] - Ransomware Victim: Turn5 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[ECLIPSE] - Ransomware Victim: part02[.]simplexengg[.]in - https://www.redpacketsecurity.com/eclipse-ransomware-victim-part02-simplexengg-in/
RedPacket Security
[ECLIPSE] - Ransomware Victim: part02[.]simplexengg[.]in - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SAFEPAY] - Ransomware Victim: sterrer[.]net - https://www.redpacketsecurity.com/safepay-ransomware-victim-sterrer-net/
RedPacket Security
[SAFEPAY] - Ransomware Victim: sterrer[.]net - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INTERLOCK] - Ransomware Victim: O2 Dental Group - https://www.redpacketsecurity.com/interlock-ransomware-victim-o2-dental-group/
RedPacket Security
[INTERLOCK] - Ransomware Victim: O2 Dental Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Asia Era One - https://www.redpacketsecurity.com/qilin-ransomware-victim-asia-era-one/
RedPacket Security
[QILIN] - Ransomware Victim: Asia Era One - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-105182 - SourceCodester - Online Reviewer Management System - https://www.redpacketsecurity.com/cve-alert-cve-2026-105182-sourcecodester-online-reviewer-management-system/
RedPacket Security
CVE Alert: CVE-2026-105182 - SourceCodester - Online Reviewer Management System - RedPacket Security
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file
CVE Alert: CVE-2026-105383 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-105383-onetwothreeneth-hospitalmanagementsystem/
RedPacket Security
CVE Alert: CVE-2026-105383 - onetwothreeneth - HospitalManagementSystem - RedPacket Security
A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of
CVE Alert: CVE-2026-105290 - feelec-yishu - feelcrm-os - https://www.redpacketsecurity.com/cve-alert-cve-2026-105290-feelec-yishu-feelcrm-os/
RedPacket Security
CVE Alert: CVE-2026-105290 - feelec-yishu - feelcrm-os - RedPacket Security
A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file
CVE Alert: CVE-2026-105232 - kishor-23 - food-waste-management-system - https://www.redpacketsecurity.com/cve-alert-cve-2026-105232-kishor-23-food-waste-management-system/
RedPacket Security
CVE Alert: CVE-2026-105232 - kishor-23 - food-waste-management-system - RedPacket Security
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The
CVE Alert: CVE-2026-105294 - Legcord - Legcord - https://www.redpacketsecurity.com/cve-alert-cve-2026-105294-legcord-legcord/
RedPacket Security
CVE Alert: CVE-2026-105294 - Legcord - Legcord - RedPacket Security
Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the
CVE Alert: CVE-2026-105385 - onetwothreeneth - HospitalManagementSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-105385-onetwothreeneth-hospitalmanagementsystem/
RedPacket Security
CVE Alert: CVE-2026-105385 - onetwothreeneth - HospitalManagementSystem - RedPacket Security
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is
CVE Alert: CVE-2026-101919 - Red Hat - Multicluster Engine for Kubernetes - https://www.redpacketsecurity.com/cve-alert-cve-2026-101919-red-hat-multicluster-engine-for-kubernetes/
RedPacket Security
CVE Alert: CVE-2026-101919 - Red Hat - Multicluster Engine for Kubernetes - RedPacket Security
A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privileged