[BYOD] - Ransomware Victim: Decorolala - https://www.redpacketsecurity.com/byod-ransomware-victim-decorolala/
RedPacket Security
[BYOD] - Ransomware Victim: Decorolala - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: MarieBelle New York - https://www.redpacketsecurity.com/n0n-ransomware-victim-mariebelle-new-york/
RedPacket Security
[N0N] - Ransomware Victim: MarieBelle New York - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: PG Group (Pure Options) - https://www.redpacketsecurity.com/n0n-ransomware-victim-pg-group-pure-options/
RedPacket Security
[N0N] - Ransomware Victim: PG Group (Pure Options) - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[EMPERADOR] - Ransomware Victim: CMC AUDITORES SRL - https://www.redpacketsecurity.com/emperador-ransomware-victim-cmc-auditores-srl/
RedPacket Security
[EMPERADOR] - Ransomware Victim: CMC AUDITORES SRL - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[VEXY RANSOMWARE] - Ransomware Victim: Guarufilme - https://www.redpacketsecurity.com/vexy-ransomware-ransomware-victim-guarufilme/
RedPacket Security
[VEXY RANSOMWARE] - Ransomware Victim: Guarufilme - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: Admirals Trading - https://www.redpacketsecurity.com/auditteam-ransomware-victim-admirals-trading/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: Admirals Trading - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PANZER] - Ransomware Victim: Valode & Pistre - https://www.redpacketsecurity.com/panzer-ransomware-victim-valode-pistre/
RedPacket Security
[PANZER] - Ransomware Victim: Valode & Pistre - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: Ze***ce - https://www.redpacketsecurity.com/auditteam-ransomware-victim-ze-ce/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: Ze***ce - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: Sa***ge - https://www.redpacketsecurity.com/auditteam-ransomware-victim-sa-ge/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: Sa***ge - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[AUDITTEAM] - Ransomware Victim: AD***ed - https://www.redpacketsecurity.com/auditteam-ransomware-victim-ad-ed/
RedPacket Security
[AUDITTEAM] - Ransomware Victim: AD***ed - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[PANZER] - Ransomware Victim: Zenidoc - https://www.redpacketsecurity.com/panzer-ransomware-victim-zenidoc/
RedPacket Security
[PANZER] - Ransomware Victim: Zenidoc - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-109398 - gumlet - php-image-resize - https://www.redpacketsecurity.com/cve-alert-cve-2026-109398-gumlet-php-image-resize/
RedPacket Security
CVE Alert: CVE-2026-109398 - gumlet - php-image-resize - RedPacket Security
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD
CVE Alert: CVE-2026-109391 - Square - Squash - https://www.redpacketsecurity.com/cve-alert-cve-2026-109391-square-squash/
RedPacket Security
CVE Alert: CVE-2026-109391 - Square - Squash - RedPacket Security
Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the
CVE Alert: CVE-2026-109397 - Thelia - Thelia - https://www.redpacketsecurity.com/cve-alert-cve-2026-109397-thelia-thelia/
RedPacket Security
CVE Alert: CVE-2026-109397 - Thelia - Thelia - RedPacket Security
Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files
CVE Alert: CVE-2026-109399 - sbabic - swupdate - https://www.redpacketsecurity.com/cve-alert-cve-2026-109399-sbabic-swupdate/
RedPacket Security
CVE Alert: CVE-2026-109399 - sbabic - swupdate - RedPacket Security
SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509
CVE Alert: CVE-2026-109394 - thirty bees - thirty bees - https://www.redpacketsecurity.com/cve-alert-cve-2026-109394-thirty-bees-thirty-bees/
RedPacket Security
CVE Alert: CVE-2026-109394 - thirty bees - thirty bees - RedPacket Security
Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to
CVE Alert: CVE-2026-109290 - open-webui - open-webui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109290-open-webui-open-webui/
RedPacket Security
CVE Alert: CVE-2026-109290 - open-webui - open-webui - RedPacket Security
Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute
CVE Alert: CVE-2026-109238 - unclecode - crawl4ai - https://www.redpacketsecurity.com/cve-alert-cve-2026-109238-unclecode-crawl4ai/
RedPacket Security
CVE Alert: CVE-2026-109238 - unclecode - crawl4ai - RedPacket Security
Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling
CVE Alert: CVE-2026-109237 - unclecode - crawl4ai - https://www.redpacketsecurity.com/cve-alert-cve-2026-109237-unclecode-crawl4ai/
RedPacket Security
CVE Alert: CVE-2026-109237 - unclecode - crawl4ai - RedPacket Security
Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping
CVE Alert: CVE-2026-109242 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109242-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-109242 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is
CVE Alert: CVE-2026-109286 - open-webui - open-webui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109286-open-webui-open-webui/
RedPacket Security
CVE Alert: CVE-2026-109286 - open-webui - open-webui - RedPacket Security
Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in