[QILIN] - Ransomware Victim: CNESTEN - https://www.redpacketsecurity.com/qilin-ransomware-victim-cnesten/
RedPacket Security
[QILIN] - Ransomware Victim: CNESTEN - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Friendship Christian School - https://www.redpacketsecurity.com/qilin-ransomware-victim-friendship-christian-school/
RedPacket Security
[QILIN] - Ransomware Victim: Friendship Christian School - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108718 - Rill Data - rill - https://www.redpacketsecurity.com/cve-alert-cve-2026-108718-rill-data-rill/
RedPacket Security
CVE Alert: CVE-2026-108718 - Rill Data - rill - RedPacket Security
Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered
CVE Alert: CVE-2026-108740 - arp242 - GoatCounter - https://www.redpacketsecurity.com/cve-alert-cve-2026-108740-arp242-goatcounter/
RedPacket Security
CVE Alert: CVE-2026-108740 - arp242 - GoatCounter - RedPacket Security
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify
CVE Alert: CVE-2026-108571 - Xinhu - Rainrock RockOA - https://www.redpacketsecurity.com/cve-alert-cve-2026-108571-xinhu-rainrock-rockoa/
RedPacket Security
CVE Alert: CVE-2026-108571 - Xinhu - Rainrock RockOA - RedPacket Security
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file
CVE Alert: CVE-2026-108714 - modelcontextprotocol - kotlin-sdk - https://www.redpacketsecurity.com/cve-alert-cve-2026-108714-modelcontextprotocol-kotlin-sdk/
RedPacket Security
CVE Alert: CVE-2026-108714 - modelcontextprotocol - kotlin-sdk - RedPacket Security
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because
CVE Alert: CVE-2026-108739 - openagents-org - OpenAgents - https://www.redpacketsecurity.com/cve-alert-cve-2026-108739-openagents-org-openagents/
RedPacket Security
CVE Alert: CVE-2026-108739 - openagents-org - OpenAgents - RedPacket Security
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all
CVE Alert: CVE-2026-108744 - MinaSaad1 - pbi-cli - https://www.redpacketsecurity.com/cve-alert-cve-2026-108744-minasaad1-pbi-cli/
RedPacket Security
CVE Alert: CVE-2026-108744 - MinaSaad1 - pbi-cli - RedPacket Security
pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pbip paths to cmd /c start when
CVE Alert: CVE-2026-108746 - Vearch - vearch - https://www.redpacketsecurity.com/cve-alert-cve-2026-108746-vearch-vearch/
RedPacket Security
CVE Alert: CVE-2026-108746 - Vearch - vearch - RedPacket Security
Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege
[N0N] - Ransomware Victim: Company #26 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-26/
RedPacket Security
[N0N] - Ransomware Victim: Company #26 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Company #27 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-27/
RedPacket Security
[N0N] - Ransomware Victim: Company #27 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Company #25 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-25/
RedPacket Security
[N0N] - Ransomware Victim: Company #25 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Company #28 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-28/
RedPacket Security
[N0N] - Ransomware Victim: Company #28 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Company #29 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-29/
RedPacket Security
[N0N] - Ransomware Victim: Company #29 - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[RHYSIDA] - Ransomware Victim: Reed & Giordano PA - https://www.redpacketsecurity.com/rhysida-ransomware-victim-reed-giordano-pa/
RedPacket Security
[RHYSIDA] - Ransomware Victim: Reed & Giordano PA - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
HackerOne Bug Bounty Disclosure: actiontext-to-markdown-still-allows-javascript-links-in-kramdown-via-rails-generated-table-cells-after-pr-wwe - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-actiontext-to-markdown-still-allows-javascript-links-in-kramdown-via-rails-generated-table-cells-after-pr-wwe/
RedPacket Security
HackerOne Bug Bounty Disclosure: actiontext-to-markdown-still-allows-javascript-links-in-kramdown-via-rails-generated-table-cells…
CompanyRuby on Rails
HackerOne Bug Bounty Disclosure: server-crash-stack-overflow-dos-via-unbounded-recursion-in-mariadb-wkb-geometrycollection-parser-davinci - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-server-crash-stack-overflow-dos-via-unbounded-recursion-in-mariadb-wkb-geometrycollection-parser-davinci/
RedPacket Security
HackerOne Bug Bounty Disclosure: server-crash-stack-overflow-dos-via-unbounded-recursion-in-mariadb-wkb-geometrycollection-parser…
CompanyMariaDB
CVE Alert: CVE-2026-108758 - alextselegidis - easyappointments - https://www.redpacketsecurity.com/cve-alert-cve-2026-108758-alextselegidis-easyappointments/
RedPacket Security
CVE Alert: CVE-2026-108758 - alextselegidis - easyappointments - RedPacket Security
Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::register() that allows unauthenticated attackers to modify any
CVE Alert: CVE-2026-108853 - UnicomAI - Wanwu - https://www.redpacketsecurity.com/cve-alert-cve-2026-108853-unicomai-wanwu/
RedPacket Security
CVE Alert: CVE-2026-108853 - UnicomAI - Wanwu - RedPacket Security
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants'
CVE Alert: CVE-2026-108863 - Katanemo - Plano - https://www.redpacketsecurity.com/cve-alert-cve-2026-108863-katanemo-plano/
RedPacket Security
CVE Alert: CVE-2026-108863 - Katanemo - Plano - RedPacket Security
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin
CVE Alert: CVE-2026-108760 - llama-farm - llamafarm - https://www.redpacketsecurity.com/cve-alert-cve-2026-108760-llama-farm-llamafarm/
RedPacket Security
CVE Alert: CVE-2026-108760 - llama-farm - llamafarm - RedPacket Security
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI