CVE Alert: CVE-2026-109403 - conductor-oss - conductor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109403-conductor-oss-conductor/
RedPacket Security
CVE Alert: CVE-2026-109403 - conductor-oss - conductor - RedPacket Security
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file
CVE Alert: CVE-2026-109405 - conductor-oss - conductor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109405-conductor-oss-conductor/
RedPacket Security
CVE Alert: CVE-2026-109405 - conductor-oss - conductor - RedPacket Security
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file
CVE Alert: CVE-2026-109519 - n/a - YouTransfer - https://www.redpacketsecurity.com/cve-alert-cve-2026-109519-n-a-youtransfer/
RedPacket Security
CVE Alert: CVE-2026-109519 - n/a - YouTransfer - RedPacket Security
A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template
CVE Alert: CVE-2026-109520 - Colorful - iGameCenter - https://www.redpacketsecurity.com/cve-alert-cve-2026-109520-colorful-igamecenter/
RedPacket Security
CVE Alert: CVE-2026-109520 - Colorful - iGameCenter - RedPacket Security
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of
CVE Alert: CVE-2026-109676 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109676-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-109676 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle
CVE Alert: CVE-2026-74034 - Wazuh - wazuh-manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-74034-wazuh-wazuh-manager/
RedPacket Security
CVE Alert: CVE-2026-74034 - Wazuh - wazuh-manager - RedPacket Security
Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with
CVE Alert: CVE-2026-109967 - marcopiovanello - yt-dlp-web-ui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109967-marcopiovanello-yt-dlp-web-ui/
RedPacket Security
CVE Alert: CVE-2026-109967 - marcopiovanello - yt-dlp-web-ui - RedPacket Security
yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated
CVE Alert: CVE-2026-109960 - froxlor - froxlor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109960-froxlor-froxlor/
RedPacket Security
CVE Alert: CVE-2026-109960 - froxlor - froxlor - RedPacket Security
Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting
CVE Alert: CVE-2026-109956 - nltk - nltk - https://www.redpacketsecurity.com/cve-alert-cve-2026-109956-nltk-nltk/
RedPacket Security
CVE Alert: CVE-2026-109956 - nltk - nltk - RedPacket Security
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying
CVE Alert: CVE-2026-109961 - froxlor - froxlor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109961-froxlor-froxlor/
RedPacket Security
CVE Alert: CVE-2026-109961 - froxlor - froxlor - RedPacket Security
Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned
CVE Alert: CVE-2026-74036 - Wazuh - wazuh-agent - https://www.redpacketsecurity.com/cve-alert-cve-2026-74036-wazuh-wazuh-agent/
RedPacket Security
CVE Alert: CVE-2026-74036 - Wazuh - wazuh-agent - RedPacket Security
Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration
CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-74037-wazuh-wazuh-manager/
RedPacket Security
CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - RedPacket Security
Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist.
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - https://www.redpacketsecurity.com/aurora-ransomware-victim-estrategias-bigmat-s-l-u/
RedPacket Security
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - https://www.redpacketsecurity.com/nightspire-ransomware-victim-o-s-e-solutions/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - https://www.redpacketsecurity.com/nightspire-ransomware-victim-colorado-texas/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-e-z-pack-trucks/
RedPacket Security
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-skycc-co-th/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-saintpierredescorps-fr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Green Clinic - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-green-clinic/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Green Clinic - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-kordhotels-gr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-poolegroup-com-au/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating