[THEGENTLEMEN] - Ransomware Victim: BigID - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-bigid/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: BigID - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: MoneyGram - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-moneygram/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: MoneyGram - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108799 - jackq - XCMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-108799-jackq-xcms/
RedPacket Security
CVE Alert: CVE-2026-108799 - jackq - XCMS - RedPacket Security
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the
CVE Alert: CVE-2026-108805 - krupalshah - EmployeeRecruitmentSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-108805-krupalshah-employeerecruitmentsystem/
RedPacket Security
CVE Alert: CVE-2026-108805 - krupalshah - EmployeeRecruitmentSystem - RedPacket Security
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function
CVE Alert: CVE-2026-108798 - ZKTeco - BioTime - https://www.redpacketsecurity.com/cve-alert-cve-2026-108798-zkteco-biotime/
RedPacket Security
CVE Alert: CVE-2026-108798 - ZKTeco - BioTime - RedPacket Security
**Risk verdict:** Treat this as a high-priority exposure review: the reported network path needs no authentication or user action, but KEV, SSVC, PoC and EPSS
CVE Alert: CVE-2026-108806 - krupalshah - EmployeeRecruitmentSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-108806-krupalshah-employeerecruitmentsystem/
RedPacket Security
CVE Alert: CVE-2026-108806 - krupalshah - EmployeeRecruitmentSystem - RedPacket Security
A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function
Critical Vulnerability in Citrix NetScaler ADC and NetScaler Gateway - https://www.redpacketsecurity.com/csa-gov-sg-critical-vulnerability-in-citrix-netscaler-adc-and-netscaler-gateway-12-10-2026/
RedPacket Security
Critical Vulnerability in Citrix NetScaler ADC and NetScaler Gateway - RedPacket Security
12 October 2026
Critical Vulnerabilities in HPE Networking ClearPass Policy Manager - https://www.redpacketsecurity.com/csa-gov-sg-critical-vulnerabilities-in-hpe-networking-clearpass-policy-manager-12-10-2026/
RedPacket Security
Critical Vulnerabilities in HPE Networking ClearPass Policy Manager - RedPacket Security
12 October 2026
[AKIRA] - Ransomware Victim: PIC GROUP, INC - https://www.redpacketsecurity.com/akira-ransomware-victim-pic-group-inc/
RedPacket Security
[AKIRA] - Ransomware Victim: PIC GROUP, INC - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AKIRA] - Ransomware Victim: Louis Fusco - https://www.redpacketsecurity.com/akira-ransomware-victim-louis-fusco/
RedPacket Security
[AKIRA] - Ransomware Victim: Louis Fusco - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DRAGONFORCE] - Ransomware Victim: Canadian Mennonite University (CMU) - https://www.redpacketsecurity.com/dragonforce-ransomware-victim-canadian-mennonite-university-cmu/
RedPacket Security
[DRAGONFORCE] - Ransomware Victim: Canadian Mennonite University (CMU) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108836 - n/a - Ollama - https://www.redpacketsecurity.com/cve-alert-cve-2026-108836-n-a-ollama/
RedPacket Security
CVE Alert: CVE-2026-108836 - n/a - Ollama - RedPacket Security
A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API.
CVE Alert: CVE-2026-108818 - agno-agi - agno - https://www.redpacketsecurity.com/cve-alert-cve-2026-108818-agno-agi-agno/
RedPacket Security
CVE Alert: CVE-2026-108818 - agno-agi - agno - RedPacket Security
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such
CVE Alert: CVE-2026-108807 - krupalshah - EmployeeRecruitmentSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-108807-krupalshah-employeerecruitmentsystem/
RedPacket Security
CVE Alert: CVE-2026-108807 - krupalshah - EmployeeRecruitmentSystem - RedPacket Security
A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the
CVE Alert: CVE-2026-108826 - n/a - Zen Cart - https://www.redpacketsecurity.com/cve-alert-cve-2026-108826-n-a-zen-cart/
RedPacket Security
CVE Alert: CVE-2026-108826 - n/a - Zen Cart - RedPacket Security
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the
CVE Alert: CVE-2026-108819 - agno-agi - agno - https://www.redpacketsecurity.com/cve-alert-cve-2026-108819-agno-agi-agno/
RedPacket Security
CVE Alert: CVE-2026-108819 - agno-agi - agno - RedPacket Security
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - https://www.redpacketsecurity.com/cve-alert-cve-2026-108953-cfdude-mac-shell-mcp/
RedPacket Security
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - RedPacket Security
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109186-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - https://www.redpacketsecurity.com/cve-alert-cve-2026-109164-tduckcloud-tduck-survey-form/
RedPacket Security
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - RedPacket Security
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-52903-manageiq-manageiq/
RedPacket Security
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - RedPacket Security
A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109185-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary