CVE Alert: CVE-2026-114077 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114077-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114077 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resolves a WorkerDeployment by friendlyId
CVE Alert: CVE-2026-114066 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114066-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114066 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own
CVE Alert: CVE-2026-114063 - sveltejs - kit - https://www.redpacketsecurity.com/cve-alert-cve-2026-114063-sveltejs-kit/
RedPacket Security
CVE Alert: CVE-2026-114063 - sveltejs - kit - RedPacket Security
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated
CVE Alert: CVE-2026-114084 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114084-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114084 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates the unescaped tags query parameter into
CVE Alert: CVE-2026-114082 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114082-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114082 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2
CVE Alert: CVE-2026-114078 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114078-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114078 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that allows
CVE Alert: CVE-2026-114081 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114081-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114081 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-function names into generated
CVE Alert: CVE-2026-114083 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114083-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114083 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to
CVE Alert: CVE-2026-114089 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114089-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114089 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading
CVE Alert: CVE-2026-114097 - jelmer - dulwich - https://www.redpacketsecurity.com/cve-alert-cve-2026-114097-jelmer-dulwich/
RedPacket Security
CVE Alert: CVE-2026-114097 - jelmer - dulwich - RedPacket Security
Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files outside
CVE Alert: CVE-2026-114096 - jelmer - dulwich - https://www.redpacketsecurity.com/cve-alert-cve-2026-114096-jelmer-dulwich/
RedPacket Security
CVE Alert: CVE-2026-114096 - jelmer - dulwich - RedPacket Security
Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=) that allows attackers to write arbitrary files by
CVE Alert: CVE-2026-114087 - triggerdotdev - trigger.dev - https://www.redpacketsecurity.com/cve-alert-cve-2026-114087-triggerdotdev-trigger-dev/
RedPacket Security
CVE Alert: CVE-2026-114087 - triggerdotdev - trigger.dev - RedPacket Security
Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because
CVE Alert: CVE-2026-114094 - jelmer - dulwich - https://www.redpacketsecurity.com/cve-alert-cve-2026-114094-jelmer-dulwich/
RedPacket Security
CVE Alert: CVE-2026-114094 - jelmer - dulwich - RedPacket Security
Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a
[LAMASHTU] - Ransomware Victim: FuG-Gruppe - https://www.redpacketsecurity.com/lamashtu-ransomware-victim-fug-gruppe/
RedPacket Security
[LAMASHTU] - Ransomware Victim: FuG-Gruppe - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[N0N] - Ransomware Victim: Heritage Senior Living - https://www.redpacketsecurity.com/n0n-ransomware-victim-heritage-senior-living/
RedPacket Security
[N0N] - Ransomware Victim: Heritage Senior Living - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LAMASHTU] - Ransomware Victim: WEPOS Chemie - https://www.redpacketsecurity.com/lamashtu-ransomware-victim-wepos-chemie/
RedPacket Security
[LAMASHTU] - Ransomware Victim: WEPOS Chemie - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LAMASHTU] - Ransomware Victim: Gräfliches Hofbrauhaus Freising - https://www.redpacketsecurity.com/lamashtu-ransomware-victim-grafliches-hofbrauhaus-freising/
RedPacket Security
[LAMASHTU] - Ransomware Victim: Gräfliches Hofbrauhaus Freising - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LAMASHTU] - Ransomware Victim: MECA-PRECIS - https://www.redpacketsecurity.com/lamashtu-ransomware-victim-meca-precis/
RedPacket Security
[LAMASHTU] - Ransomware Victim: MECA-PRECIS - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[LAMASHTU] - Ransomware Victim: VERGI Muenster - https://www.redpacketsecurity.com/lamashtu-ransomware-victim-vergi-muenster/
RedPacket Security
[LAMASHTU] - Ransomware Victim: VERGI Muenster - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
Ransomware Attacks Surge 50% as Rival Gangs Battle for Supremacy - https://www.redpacketsecurity.com/ransomware-attacks-rise-as-rival-gangs-vie-for-market-supremacy/
RedPacket Security
Ransomware Attacks Surge 50% as Rival Gangs Battle for Supremacy - RedPacket Security
Ransomware attacks climbed sharply in the third quarter of 2026, with researchers linking the increase to a changing cybercrime landscape and fierce
AI Agent Hijacking Models: Symantec Uncovers Autonomous Cyber-Attacks - https://www.redpacketsecurity.com/symantec-uncovers-ai-agent-hijacking-models-for-autonomous-cyber-attacks/
RedPacket Security
AI Agent Hijacking Models: Symantec Uncovers Autonomous Cyber-Attacks - RedPacket Security
An AI agent hijacking models to carry out cyber-attacks without human intervention has been uncovered by security researchers. The agent’s instructions