CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-74037-wazuh-wazuh-manager/
RedPacket Security
CVE Alert: CVE-2026-74037 - Wazuh - wazuh-manager - RedPacket Security
Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist.
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - https://www.redpacketsecurity.com/aurora-ransomware-victim-estrategias-bigmat-s-l-u/
RedPacket Security
[AURORA] - Ransomware Victim: Estrategias BigMat S[.]L[.]U[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - https://www.redpacketsecurity.com/nightspire-ransomware-victim-o-s-e-solutions/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: ***o* **s**e** Solutions - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - https://www.redpacketsecurity.com/nightspire-ransomware-victim-colorado-texas/
RedPacket Security
[NIGHTSPIRE] - Ransomware Victim: Colorado Texas - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-e-z-pack-trucks/
RedPacket Security
[WALLSTREET] - Ransomware Victim: E-Z Pack Trucks - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-skycc-co-th/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: skycc[.]co[.]th - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-saintpierredescorps-fr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: saintpierredescorps[.]fr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[WALLSTREET] - Ransomware Victim: Green Clinic - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-green-clinic/
RedPacket Security
[WALLSTREET] - Ransomware Victim: Green Clinic - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-kordhotels-gr/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: kordhotels[.]gr - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - https://www.redpacketsecurity.com/lockbit5-ransomware-victim-poolegroup-com-au/
RedPacket Security
[LOCKBIT5] - Ransomware Victim: poolegroup[.]com[.]au - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[EMPERADOR] - Ransomware Victim: MyM ODONTOCLINICA S[.]A - https://www.redpacketsecurity.com/emperador-ransomware-victim-mym-odontoclinica-s-a/
RedPacket Security
[EMPERADOR] - Ransomware Victim: MyM ODONTOCLINICA S[.]A - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-110025 - slackero - phpwcms - https://www.redpacketsecurity.com/cve-alert-cve-2026-110025-slackero-phpwcms/
RedPacket Security
CVE Alert: CVE-2026-110025 - slackero - phpwcms - RedPacket Security
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file
CVE Alert: CVE-2026-109525 - girishsaraf - Online-Appointment-Booking-System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109525-girishsaraf-online-appointment-booking-system/
RedPacket Security
CVE Alert: CVE-2026-109525 - girishsaraf - Online-Appointment-Booking-System - RedPacket Security
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part
CVE Alert: CVE-2026-109523 - girishsaraf - Online-Appointment-Booking-System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109523-girishsaraf-online-appointment-booking-system/
RedPacket Security
CVE Alert: CVE-2026-109523 - girishsaraf - Online-Appointment-Booking-System - RedPacket Security
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is
CVE Alert: CVE-2026-109605 - SourceCodester - Simple Cafe Billing System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109605-sourcecodester-simple-cafe-billing-system/
RedPacket Security
CVE Alert: CVE-2026-109605 - SourceCodester - Simple Cafe Billing System - RedPacket Security
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file
CVE Alert: CVE-2026-109522 - girishsaraf - Online-Appointment-Booking-System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109522-girishsaraf-online-appointment-booking-system/
RedPacket Security
CVE Alert: CVE-2026-109522 - girishsaraf - Online-Appointment-Booking-System - RedPacket Security
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown
CVE Alert: CVE-2026-109620 - SourceCodester - Online Reviewer System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109620-sourcecodester-online-reviewer-system/
RedPacket Security
CVE Alert: CVE-2026-109620 - SourceCodester - Online Reviewer System - RedPacket Security
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file
CVE Alert: CVE-2026-110102 - romkatv - powerlevel10k - https://www.redpacketsecurity.com/cve-alert-cve-2026-110102-romkatv-powerlevel10k/
RedPacket Security
CVE Alert: CVE-2026-110102 - romkatv - powerlevel10k - RedPacket Security
Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl
CVE Alert: CVE-2026-109607 - SourceCodester - Online Exam System - https://www.redpacketsecurity.com/cve-alert-cve-2026-109607-sourcecodester-online-exam-system/
RedPacket Security
CVE Alert: CVE-2026-109607 - SourceCodester - Online Exam System - RedPacket Security
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the
CVE Alert: CVE-2026-110097 - ikaros-dev - ikaros - https://www.redpacketsecurity.com/cve-alert-cve-2026-110097-ikaros-dev-ikaros/
RedPacket Security
CVE Alert: CVE-2026-110097 - ikaros-dev - ikaros - RedPacket Security
Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing