CVE Alert: CVE-2026-109676 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-109676-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-109676 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle
CVE Alert: CVE-2026-74034 - Wazuh - wazuh-manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-74034-wazuh-wazuh-manager/
RedPacket Security
CVE Alert: CVE-2026-74034 - Wazuh - wazuh-manager - RedPacket Security
Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with
CVE Alert: CVE-2026-109967 - marcopiovanello - yt-dlp-web-ui - https://www.redpacketsecurity.com/cve-alert-cve-2026-109967-marcopiovanello-yt-dlp-web-ui/
RedPacket Security
CVE Alert: CVE-2026-109967 - marcopiovanello - yt-dlp-web-ui - RedPacket Security
yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated
CVE Alert: CVE-2026-109960 - froxlor - froxlor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109960-froxlor-froxlor/
RedPacket Security
CVE Alert: CVE-2026-109960 - froxlor - froxlor - RedPacket Security
Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting
CVE Alert: CVE-2026-109956 - nltk - nltk - https://www.redpacketsecurity.com/cve-alert-cve-2026-109956-nltk-nltk/
RedPacket Security
CVE Alert: CVE-2026-109956 - nltk - nltk - RedPacket Security
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying
CVE Alert: CVE-2026-109961 - froxlor - froxlor - https://www.redpacketsecurity.com/cve-alert-cve-2026-109961-froxlor-froxlor/
RedPacket Security
CVE Alert: CVE-2026-109961 - froxlor - froxlor - RedPacket Security
Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned
CVE Alert: CVE-2026-74036 - Wazuh - wazuh-agent - https://www.redpacketsecurity.com/cve-alert-cve-2026-74036-wazuh-wazuh-agent/
RedPacket Security
CVE Alert: CVE-2026-74036 - Wazuh - wazuh-agent - RedPacket Security
Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration
CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-74037-wazuh-wazuh-manager/
RedPacket Security
CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - RedPacket Security
Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist.
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - https://www.redpacketsecurity.com/aurora-ransomware-victim-estrategias-bigmat-s-l-u/
RedPacket Security
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - https://www.redpacketsecurity.com/nightspire-ransomware-victim-o-s-e-solutions/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - https://www.redpacketsecurity.com/nightspire-ransomware-victim-colorado-texas/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-e-z-pack-trucks/
RedPacket Security
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-skycc-co-th/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-saintpierredescorps-fr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Green Clinic - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-green-clinic/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Green Clinic - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-kordhotels-gr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-poolegroup-com-au/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[EMPERADOR] - Ransomware Victim: MyM ODONTOCLINICA S[.]A - https://www.redpacketsecurity.com/emperador-ransomware-victim-mym-odontoclinica-s-a/
RedPacket Security
[EMPERADOR] - Ransomware Victim: MyM ODONTOCLINICA S[.]A - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-110025 - slackero - phpwcms - https://www.redpacketsecurity.com/cve-alert-cve-2026-110025-slackero-phpwcms/
RedPacket Security
CVE Alert: CVE-2026-110025 - slackero - phpwcms - RedPacket Security
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file
CVE Alert: CVE-2026-109525 - girishsaraf - Online-Appointment-Booking-System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109525-girishsaraf-online-appointment-booking-system/
RedPacket Security
CVE Alert: CVE-2026-109525 - girishsaraf - Online-Appointment-Booking-System - RedPacket Security
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part