Posh C2 Detected - 143[.]110[.]219[.]27:4433 - https://www.redpacketsecurity.com/posh-c2-detected-143-110-219-27-port-4433/
RedPacket Security
Posh C2 Detected - 143[.]110[.]219[.]27:4433 - RedPacket Security
Posh C2 Detection Alerts
[THEGENTLEMEN] - Ransomware Victim: First Dental Health - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-first-dental-health/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: First Dental Health - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: AirQ - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-airq/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: AirQ - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Gio Dental Med Spa - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-gio-dental-med-spa/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Gio Dental Med Spa - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[BYOD] - Ransomware Victim: Decorolala - 500 Line Sample - https://www.redpacketsecurity.com/byod-ransomware-victim-decorolala-500-line-sample/
RedPacket Security
[BYOD] - Ransomware Victim: Decorolala - 500 Line Sample - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[VEXY RANSOMWARE] - Ransomware Victim: polisee Inc - https://www.redpacketsecurity.com/vexy-ransomware-ransomware-victim-polisee-inc/
RedPacket Security
[VEXY RANSOMWARE] - Ransomware Victim: polisee Inc - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Wellington College International School Bangkok - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-wellington-college-international-school-bangkok/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Wellington College International School Bangkok - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[HELIX] - Ransomware Victim: Rheem Global - https://www.redpacketsecurity.com/helix-ransomware-victim-rheem-global/
RedPacket Security
[HELIX] - Ransomware Victim: Rheem Global - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[MAJINAHANASHI] - Ransomware Victim: Robert Hitchins Limited - https://www.redpacketsecurity.com/majinahanashi-ransomware-victim-robert-hitchins-limited/
RedPacket Security
[MAJINAHANASHI] - Ransomware Victim: Robert Hitchins Limited - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108123 - murgroland - WP Booking System – Booking Calendar - https://www.redpacketsecurity.com/cve-alert-cve-2026-108123-murgroland-wp-booking-system-booking-calendar/
RedPacket Security
CVE Alert: CVE-2026-108123 - murgroland - WP Booking System – Booking Calendar - RedPacket Security
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due
CVE Alert: CVE-2026-103899 - daigo75 - EU VAT Assistant for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-103899-daigo75-eu-vat-assistant-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-103899 - daigo75 - EU VAT Assistant for WooCommerce - RedPacket Security
The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to,
CVE Alert: CVE-2026-109208 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - https://www.redpacketsecurity.com/cve-alert-cve-2026-109208-thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses/
RedPacket Security
CVE Alert: CVE-2026-109208 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - RedPacket Security
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity
CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-92798-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96660-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111881-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-100316-davidanderson-european-vat-compliance-assistant-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - RedPacket Security
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - https://www.redpacketsecurity.com/cve-alert-cve-2026-111110-stiofansisland-payment-forms-buy-now-buttons-and-invoicing-system-getpaid/
RedPacket Security
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - RedPacket Security
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd'
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111882-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111880-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111897-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111907-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database