[FULCRUMSEC] - Ransomware Victim: PingCAP / TiDB Cloud - https://www.redpacketsecurity.com/fulcrumsec-ransomware-victim-pingcap-tidb-cloud/
RedPacket Security
[FULCRUMSEC] - Ransomware Victim: PingCAP / TiDB Cloud - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[SILENTRANSOMGROUP] - Ransomware Victim: Latham & Watkins - https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-latham-watkins/
RedPacket Security
[SILENTRANSOMGROUP] - Ransomware Victim: Latham & Watkins - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Johnson & Pace - https://www.redpacketsecurity.com/qilin-ransomware-victim-johnson-pace/
RedPacket Security
[QILIN] - Ransomware Victim: Johnson & Pace - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[NITROGEN] - Ransomware Victim: Walbro - https://www.redpacketsecurity.com/nitrogen-ransomware-victim-walbro/
RedPacket Security
[NITROGEN] - Ransomware Victim: Walbro - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: SkyWorld Air Cargo - https://www.redpacketsecurity.com/qilin-ransomware-victim-skyworld-air-cargo/
RedPacket Security
[QILIN] - Ransomware Victim: SkyWorld Air Cargo - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: WalkingTree Technologies - https://www.redpacketsecurity.com/qilin-ransomware-victim-walkingtree-technologies/
RedPacket Security
[QILIN] - Ransomware Victim: WalkingTree Technologies - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Grupo Cronica - https://www.redpacketsecurity.com/qilin-ransomware-victim-grupo-cronica/
RedPacket Security
[QILIN] - Ransomware Victim: Grupo Cronica - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: Salauno - https://www.redpacketsecurity.com/qilin-ransomware-victim-salauno/
RedPacket Security
[QILIN] - Ransomware Victim: Salauno - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[QILIN] - Ransomware Victim: CREDIN - https://www.redpacketsecurity.com/qilin-ransomware-victim-credin/
RedPacket Security
[QILIN] - Ransomware Victim: CREDIN - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
CVE Alert: CVE-2026-112264 - bentoml - BentoML - https://www.redpacketsecurity.com/cve-alert-cve-2026-112264-bentoml-bentoml/
RedPacket Security
CVE Alert: CVE-2026-112264 - bentoml - BentoML - RedPacket Security
BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding
CVE Alert: CVE-2026-112262 - risingwavelabs - risingwave - https://www.redpacketsecurity.com/cve-alert-cve-2026-112262-risingwavelabs-risingwave/
RedPacket Security
CVE Alert: CVE-2026-112262 - risingwavelabs - risingwave - RedPacket Security
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by
CVE Alert: CVE-2026-112263 - alexpasmantier - television - https://www.redpacketsecurity.com/cve-alert-cve-2026-112263-alexpasmantier-television/
RedPacket Security
CVE Alert: CVE-2026-112263 - alexpasmantier - television - RedPacket Security
Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped
CVE Alert: CVE-2026-112287 - krayin - laravel-crm - https://www.redpacketsecurity.com/cve-alert-cve-2026-112287-krayin-laravel-crm/
RedPacket Security
CVE Alert: CVE-2026-112287 - krayin - laravel-crm - RedPacket Security
Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated
CVE Alert: CVE-2026-112145 - speaches-ai - speaches - https://www.redpacketsecurity.com/cve-alert-cve-2026-112145-speaches-ai-speaches/
RedPacket Security
CVE Alert: CVE-2026-112145 - speaches-ai - speaches - RedPacket Security
A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function
CVE Alert: CVE-2026-10572 - IBM - MQ Operator - https://www.redpacketsecurity.com/cve-alert-cve-2026-10572-ibm-mq-operator/
RedPacket Security
CVE Alert: CVE-2026-10572 - IBM - MQ Operator - RedPacket Security
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing
CVE Alert: CVE-2026-112309 - airjp73 - @rvf/set-get - https://www.redpacketsecurity.com/cve-alert-cve-2026-112309-airjp73-rvf-set-get/
RedPacket Security
CVE Alert: CVE-2026-112309 - airjp73 - @rvf/set-get - RedPacket Security
@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared
CVE Alert: CVE-2026-112304 - Mindee - docTR - https://www.redpacketsecurity.com/cve-alert-cve-2026-112304-mindee-doctr/
RedPacket Security
CVE Alert: CVE-2026-112304 - Mindee - docTR - RedPacket Security
docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without
CVE Alert: CVE-2026-112150 - vraj404 - Criminal-Management-System - https://www.redpacketsecurity.com/cve-alert-cve-2026-112150-vraj404-criminal-management-system/
RedPacket Security
CVE Alert: CVE-2026-112150 - vraj404 - Criminal-Management-System - RedPacket Security
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of
CVE Alert: CVE-2026-112308 - crewAIInc - crewai-tools - https://www.redpacketsecurity.com/cve-alert-cve-2026-112308-crewaiinc-crewai-tools/
RedPacket Security
CVE Alert: CVE-2026-112308 - crewAIInc - crewai-tools - RedPacket Security
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources
CVE Alert: CVE-2026-12148 - IBM - MQ Operator - https://www.redpacketsecurity.com/cve-alert-cve-2026-12148-ibm-mq-operator/
RedPacket Security
CVE Alert: CVE-2026-12148 - IBM - MQ Operator - RedPacket Security
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java
CVE Alert: CVE-2026-12665 - IBM - MQ Operator - https://www.redpacketsecurity.com/cve-alert-cve-2026-12665-ibm-mq-operator/
RedPacket Security
CVE Alert: CVE-2026-12665 - IBM - MQ Operator - RedPacket Security
IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished