[THEGENTLEMEN] - Ransomware Victim: Wellington College International School Bangkok - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-wellington-college-international-school-bangkok/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Wellington College International School Bangkok - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[HELIX] - Ransomware Victim: Rheem Global - https://www.redpacketsecurity.com/helix-ransomware-victim-rheem-global/
RedPacket Security
[HELIX] - Ransomware Victim: Rheem Global - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[MAJINAHANASHI] - Ransomware Victim: Robert Hitchins Limited - https://www.redpacketsecurity.com/majinahanashi-ransomware-victim-robert-hitchins-limited/
RedPacket Security
[MAJINAHANASHI] - Ransomware Victim: Robert Hitchins Limited - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-108123 - murgroland - WP Booking System – Booking Calendar - https://www.redpacketsecurity.com/cve-alert-cve-2026-108123-murgroland-wp-booking-system-booking-calendar/
RedPacket Security
CVE Alert: CVE-2026-108123 - murgroland - WP Booking System – Booking Calendar - RedPacket Security
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due
CVE Alert: CVE-2026-103899 - daigo75 - EU VAT Assistant for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-103899-daigo75-eu-vat-assistant-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-103899 - daigo75 - EU VAT Assistant for WooCommerce - RedPacket Security
The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to,
CVE Alert: CVE-2026-109208 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - https://www.redpacketsecurity.com/cve-alert-cve-2026-109208-thimpress-learnpress-wordpress-lms-plugin-for-create-and-sell-online-courses/
RedPacket Security
CVE Alert: CVE-2026-109208 - thimpress - LearnPress – WordPress LMS Plugin for Create and Sell Online Courses - RedPacket Security
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity
CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-92798-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-92798 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder - https://www.redpacketsecurity.com/cve-alert-cve-2026-96660-wpeverest-user-registration-membership-free-paid-memberships-subscriptions-content-restriction-user-profile-custom-user-registration-login-builder/
RedPacket Security
CVE Alert: CVE-2026-96660 - wpeverest - User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…
The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111881-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111881 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-100316-davidanderson-european-vat-compliance-assistant-for-woocommerce/
RedPacket Security
CVE Alert: CVE-2026-100316 - davidanderson - European VAT Compliance Assistant for WooCommerce - RedPacket Security
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - https://www.redpacketsecurity.com/cve-alert-cve-2026-111110-stiofansisland-payment-forms-buy-now-buttons-and-invoicing-system-getpaid/
RedPacket Security
CVE Alert: CVE-2026-111110 - stiofansisland - Payment forms, Buy now buttons, and Invoicing System | GetPaid - RedPacket Security
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd'
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111882-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111882 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - https://www.redpacketsecurity.com/cve-alert-cve-2026-111880-freerdp-freerdp/
RedPacket Security
CVE Alert: CVE-2026-111880 - FreeRDP - FreeRDP - RedPacket Security
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111897-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111897 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111907-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111907 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database
CVE Alert: CVE-2026-111898 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111898-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111898 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching
CVE Alert: CVE-2026-111901 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111901-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111901 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints.
CVE Alert: CVE-2026-111884 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111884-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111884 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel
CVE Alert: CVE-2026-111909 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111909-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111909 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user
CVE Alert: CVE-2026-111908 - thorsten - phpMyFAQ - https://www.redpacketsecurity.com/cve-alert-cve-2026-111908-thorsten-phpmyfaq/
RedPacket Security
CVE Alert: CVE-2026-111908 - thorsten - phpMyFAQ - RedPacket Security
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update
Cobalt Strike Beacon Detected - 175[.]124[.]145[.]102:443 - https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-175-124-145-102-port-443/
RedPacket Security
Cobalt Strike Beacon Detected - 175[.]124[.]145[.]102:443 - RedPacket Security
Cobalt Strike Beacon Detection Alerts