CVE Alert: CVE-2026-108819 - agno-agi - agno - https://www.redpacketsecurity.com/cve-alert-cve-2026-108819-agno-agi-agno/
RedPacket Security
CVE Alert: CVE-2026-108819 - agno-agi - agno - RedPacket Security
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - https://www.redpacketsecurity.com/cve-alert-cve-2026-108953-cfdude-mac-shell-mcp/
RedPacket Security
CVE Alert: CVE-2026-108953 - cfdude - mac-shell-mcp - RedPacket Security
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109186-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109186 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - https://www.redpacketsecurity.com/cve-alert-cve-2026-109164-tduckcloud-tduck-survey-form/
RedPacket Security
CVE Alert: CVE-2026-109164 - TDuckCloud - tduck-survey-form - RedPacket Security
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-52903-manageiq-manageiq/
RedPacket Security
CVE Alert: CVE-2026-52903 - ManageIQ - ManageIQ - RedPacket Security
A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109185-jishenghua-jsherp/
RedPacket Security
CVE Alert: CVE-2026-109185 - jishenghua - jshERP - RedPacket Security
jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary
CVE Alert: CVE-2026-109201 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109201-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109201 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to
CVE Alert: CVE-2026-109205 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109205-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109205 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write
CVE Alert: CVE-2026-109199 - LogicalDOC - LogicalDOC Community Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-109199-logicaldoc-logicaldoc-community-edition/
RedPacket Security
CVE Alert: CVE-2026-109199 - LogicalDOC - LogicalDOC Community Edition - RedPacket Security
LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity
[N0N] - Ransomware Victim: GCS Kuwait (port community system operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-gcs-kuwait-port-community-system-operations/
RedPacket Security
[N0N] - Ransomware Victim: GCS Kuwait (port community system operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: T[.]S[.] Lines (intra-Asia container shipping) - https://www.redpacketsecurity.com/n0n-ransomware-victim-t-s-lines-intra-asia-container-shipping/
RedPacket Security
[N0N] - Ransomware Victim: T[.]S[.] Lines (intra-Asia container shipping) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: ZPMC (port machinery and terminal engineering) - https://www.redpacketsecurity.com/n0n-ransomware-victim-zpmc-port-machinery-and-terminal-engineering/
RedPacket Security
[N0N] - Ransomware Victim: ZPMC (port machinery and terminal engineering) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Pusan Newport Company (container terminal operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-pusan-newport-company-container-terminal-operations/
RedPacket Security
[N0N] - Ransomware Victim: Pusan Newport Company (container terminal operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Prodiel - https://www.redpacketsecurity.com/qilin-ransomware-victim-prodiel/
RedPacket Security
[QILIN] - Ransomware Victim: Prodiel - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Superterminais (port terminal operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-superterminais-port-terminal-operations/
RedPacket Security
[N0N] - Ransomware Victim: Superterminais (port terminal operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Dongkuk Steel (steel manufacturing) - https://www.redpacketsecurity.com/n0n-ransomware-victim-dongkuk-steel-steel-manufacturing/
RedPacket Security
[N0N] - Ransomware Victim: Dongkuk Steel (steel manufacturing) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Nam Dinh Vu Port (container terminal operations) - https://www.redpacketsecurity.com/n0n-ransomware-victim-nam-dinh-vu-port-container-terminal-operations/
RedPacket Security
[N0N] - Ransomware Victim: Nam Dinh Vu Port (container terminal operations) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: Cognosis Limited - https://www.redpacketsecurity.com/nightspire-ransomware-victim-cognosis-limited/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: Cognosis Limited - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: GNCNet / DGT Busan (port community IT) - https://www.redpacketsecurity.com/n0n-ransomware-victim-gncnet-dgt-busan-port-community-it/
RedPacket Security
[N0N] - Ransomware Victim: GNCNet / DGT Busan (port community IT) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Yusen Logistics Hong Kong (3PL logistics) - https://www.redpacketsecurity.com/n0n-ransomware-victim-yusen-logistics-hong-kong-3pl-logistics/
RedPacket Security
[N0N] - Ransomware Victim: Yusen Logistics Hong Kong (3PL logistics) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[METAENCRYPTOR] - Ransomware Victim: MyMichigan Health - https://www.redpacketsecurity.com/metaencryptor-ransomware-victim-mymichigan-health/
RedPacket Security
[METAENCRYPTOR] - Ransomware Victim: MyMichigan Health - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating