CVE Alert: CVE-2026-109237 - unclecode - crawl4ai - https://www.redpacketsecurity.com/cve-alert-cve-2026-109237-unclecode-crawl4ai/
RedPacket Security
CVE Alert: CVE-2026-109237 - unclecode - crawl4ai - RedPacket Security
Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping
CVE Alert: CVE-2026-109242 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109242-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-109242 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is
CVE Alert: CVE-2026-109286 - open-webui - open-webui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109286-open-webui-open-webui/
RedPacket Security
CVE Alert: CVE-2026-109286 - open-webui - open-webui - RedPacket Security
Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in
CVE Alert: CVE-2026-109305 - craftcms - cms - https://www.redpacketsecurity.com/cve-alert-cve-2026-109305-craftcms-cms/
RedPacket Security
CVE Alert: CVE-2026-109305 - craftcms - cms - RedPacket Security
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some"
CVE Alert: CVE-2026-109313 - getgrav - grav-plugin-login - https://www.redpacketsecurity.com/cve-alert-cve-2026-109313-getgrav-grav-plugin-login/
RedPacket Security
CVE Alert: CVE-2026-109313 - getgrav - grav-plugin-login - RedPacket Security
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor
CVE Alert: CVE-2026-109312 - getgrav - grav-plugin-login - https://www.redpacketsecurity.com/cve-alert-cve-2026-109312-getgrav-grav-plugin-login/
RedPacket Security
CVE Alert: CVE-2026-109312 - getgrav - grav-plugin-login - RedPacket Security
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a
CVE Alert: CVE-2026-109308 - craftcms - cms - https://www.redpacketsecurity.com/cve-alert-cve-2026-109308-craftcms-cms/
RedPacket Security
CVE Alert: CVE-2026-109308 - craftcms - cms - RedPacket Security
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCacheUpdates to UpdatesModel without
CVE Alert: CVE-2026-109291 - open-webui - open-webui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109291-open-webui-open-webui/
RedPacket Security
CVE Alert: CVE-2026-109291 - open-webui - open-webui - RedPacket Security
Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims' sessions by
CVE Alert: CVE-2026-109314 - getgrav - grav-plugin-login - https://www.redpacketsecurity.com/cve-alert-cve-2026-109314-getgrav-grav-plugin-login/
RedPacket Security
CVE Alert: CVE-2026-109314 - getgrav - grav-plugin-login - RedPacket Security
Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a
[QILIN] - Ransomware Victim: Comisión Municipal de Agua Potable y Alcantarillado de Victoria - https://www.redpacketsecurity.com/qilin-ransomware-victim-comision-municipal-de-agua-potable-y-alcantarillado-de-victoria/
RedPacket Security
[QILIN] - Ransomware Victim: Comisión Municipal de Agua Potable y Alcantarillado de Victoria - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[DIREWOLF] - Ransomware Victim: Interseguro - https://www.redpacketsecurity.com/direwolf-ransomware-victim-interseguro/
RedPacket Security
[DIREWOLF] - Ransomware Victim: Interseguro - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[RANSOMHOUSE] - Ransomware Victim: Excess Baggage - https://www.redpacketsecurity.com/ransomhouse-ransomware-victim-excess-baggage/
RedPacket Security
[RANSOMHOUSE] - Ransomware Victim: Excess Baggage - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Milstein Siegel, LLC - https://www.redpacketsecurity.com/qilin-ransomware-victim-milstein-siegel-llc/
RedPacket Security
[QILIN] - Ransomware Victim: Milstein Siegel, LLC - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[INCRANSOM] - Ransomware Victim: Great Lakes - https://www.redpacketsecurity.com/incransom-ransomware-victim-great-lakes/
RedPacket Security
[INCRANSOM] - Ransomware Victim: Great Lakes - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Brunnberg & Forshed Arkitektkontor - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-brunnberg-forshed-arkitektkontor/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Brunnberg & Forshed Arkitektkontor - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Briab Group AB - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-briab-group-ab/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Briab Group AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Ahlqvist & Almqvist Arkitekter AB - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-ahlqvist-almqvist-arkitekter-ab/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Ahlqvist & Almqvist Arkitekter AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Spectrum Arkitekter AB - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-spectrum-arkitekter-ab/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Spectrum Arkitekter AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: Codar (Pte) Ltd - https://www.redpacketsecurity.com/orova-ransomware-victim-codar-pte-ltd/
RedPacket Security
[OROVA] - Ransomware Victim: Codar (Pte) Ltd - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[OROVA] - Ransomware Victim: Alfameli Group - https://www.redpacketsecurity.com/orova-ransomware-victim-alfameli-group/
RedPacket Security
[OROVA] - Ransomware Victim: Alfameli Group - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Mantum Holding AB - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-mantum-holding-ab/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Mantum Holding AB - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating