[DRAGONFORCE] - Ransomware Victim: Canadian Mennonite University (CMU) - https://www.redpacketsecurity.com/dragonforce-ransomware-victim-canadian-mennonite-university-cmu/
RedPacket Security
[DRAGONFORCE] - Ransomware Victim: Canadian Mennonite University (CMU) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108836 - n/a - Ollama - https://www.redpacketsecurity.com/cve-alert-cve-2026-108836-n-a-ollama/
RedPacket Security
CVE Alert: CVE-2026-108836 - n/a - Ollama - RedPacket Security
A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API.
CVE Alert: CVE-2026-108818 - agno-agi - agno - https://www.redpacketsecurity.com/cve-alert-cve-2026-108818-agno-agi-agno/
RedPacket Security
CVE Alert: CVE-2026-108818 - agno-agi - agno - RedPacket Security
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such
CVE Alert: CVE-2026-108807 - krupalshah - EmployeeRecruitmentSystem - https://www.redpacketsecurity.com/cve-alert-cve-2026-108807-krupalshah-employeerecruitmentsystem/
RedPacket Security
CVE Alert: CVE-2026-108807 - krupalshah - EmployeeRecruitmentSystem - RedPacket Security
A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the
CVE Alert: CVE-2026-108826 - n/a - Zen Cart - https://www.redpacketsecurity.com/cve-alert-cve-2026-108826-n-a-zen-cart/
RedPacket Security
CVE Alert: CVE-2026-108826 - n/a - Zen Cart - RedPacket Security
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the
CVE Alert: CVE-2026-108819 - agno-agi - agno - https://www.redpacketsecurity.com/cve-alert-cve-2026-108819-agno-agi-agno/
RedPacket Security
CVE Alert: CVE-2026-108819 - agno-agi - agno - RedPacket Security
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - https://www.redpacketsecurity.com/cve-alert-cve-2026-108953-cfdude-mac-shell-mcp/
RedPacket Security
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - RedPacket Security
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109186-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - https://www.redpacketsecurity.com/cve-alert-cve-2026-109164-tduckcloud-tduck-survey-form/
RedPacket Security
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - RedPacket Security
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-52903-manageiq-manageiq/
RedPacket Security
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - RedPacket Security
A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109185-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary
CVE Alert: CVE-2026-109201 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109201-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109201 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to
CVE Alert: CVE-2026-109205 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109205-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109205 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write
CVE Alert: CVE-2026-109199 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109199-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109199 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity
[N0N] - Ransomware Victim: GCS Kuwait (port community system operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-gcs-kuwait-port-community-system-operations/
RedPacket Security
[N0N] - Ransomware Victim: GCS Kuwait (port community system operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: T[.]S[.] Lines (intra-Asia container shipping) - https://www.redpacketsecurity.com/n0n-ransomware-victim-t-s-lines-intra-asia-container-shipping/
RedPacket Security
[N0N] - Ransomware Victim: T[.]S[.] Lines (intra-Asia container shipping) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: ZPMC (port machinery and terminal engineering) - https://www.redpacketsecurity.com/n0n-ransomware-victim-zpmc-port-machinery-and-terminal-engineering/
RedPacket Security
[N0N] - Ransomware Victim: ZPMC (port machinery and terminal engineering) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Pusan Newport Company (container terminal operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-pusan-newport-company-container-terminal-operations/
RedPacket Security
[N0N] - Ransomware Victim: Pusan Newport Company (container terminal operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Prodiel - https://www.redpacketsecurity.com/qilin-ransomware-victim-prodiel/
RedPacket Security
[QILIN] - Ransomware Victim: Prodiel - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Superterminais (port terminal operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-superterminais-port-terminal-operations/
RedPacket Security
[N0N] - Ransomware Victim: Superterminais (port terminal operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Dongkuk Steel (steel manufacturing) - https://www.redpacketsecurity.com/n0n-ransomware-victim-dongkuk-steel-steel-manufacturing/
RedPacket Security
[N0N] - Ransomware Victim: Dongkuk Steel (steel manufacturing) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating