Channel Public Channel

RedPacket Security

@redpacketsecurity

Status Page: https://stats.uptimerobot.com/NOPPkcZEk2

Open in Telegram

Subscribers: 3.11K
Photos: 286
Videos: 0
Links: 123K

Showing posts older than #123397 · Back to latest

Older Posts 20 shown

Post #123396 11 Oct 4, 2026, 19:43 UTC

CVE Alert: CVE-2026-105086 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105086-wwbn-avideo/

RedPacket Security CVE Alert: CVE-2026-105086 - WWBN - AVideo - RedPacket Security WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting

Post #123395 8 Oct 4, 2026, 19:43 UTC

CVE Alert: CVE-2026-105089 - WWBN - AVideo - https://www.redpacketsecurity.com/cve-alert-cve-2026-105089-wwbn-avideo/

RedPacket Security CVE Alert: CVE-2026-105089 - WWBN - AVideo - RedPacket Security WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a

Post #123394 5 Oct 4, 2026, 19:43 UTC

CVE Alert: CVE-2026-105213 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105213-zitadel-zitadel/

RedPacket Security CVE Alert: CVE-2026-105213 - zitadel - zitadel - RedPacket Security ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users

Post #123393 6 Oct 4, 2026, 19:43 UTC

CVE Alert: CVE-2026-105218 - go-pay - gopay - https://www.redpacketsecurity.com/cve-alert-cve-2026-105218-go-pay-gopay/

RedPacket Security CVE Alert: CVE-2026-105218 - go-pay - gopay - RedPacket Security gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate

Post #123392 3 Oct 4, 2026, 19:43 UTC

CVE Alert: CVE-2026-105216 - micro - go-micro - https://www.redpacketsecurity.com/cve-alert-cve-2026-105216-micro-go-micro/

RedPacket Security CVE Alert: CVE-2026-105216 - micro - go-micro - RedPacket Security go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS

Post #123391 7 Oct 4, 2026, 19:42 UTC

CVE Alert: CVE-2026-105208 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105208-zitadel-zitadel/

RedPacket Security CVE Alert: CVE-2026-105208 - zitadel - zitadel - RedPacket Security ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper

Post #123390 4 Oct 4, 2026, 19:42 UTC

CVE Alert: CVE-2026-105211 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105211-zitadel-zitadel/

RedPacket Security CVE Alert: CVE-2026-105211 - zitadel - zitadel - RedPacket Security ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP

Post #123389 5 Oct 4, 2026, 19:42 UTC

CVE Alert: CVE-2026-105158 - RainyGao - DocSys - https://www.redpacketsecurity.com/cve-alert-cve-2026-105158-rainygao-docsys/

RedPacket Security CVE Alert: CVE-2026-105158 - RainyGao - DocSys - RedPacket Security A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file

Post #123388 9 Oct 4, 2026, 19:42 UTC

CVE Alert: CVE-2026-105210 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105210-zitadel-zitadel/

RedPacket Security CVE Alert: CVE-2026-105210 - zitadel - zitadel - RedPacket Security ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and

Post #123387 10 Oct 4, 2026, 19:42 UTC

CVE Alert: CVE-2026-105212 - zitadel - zitadel - https://www.redpacketsecurity.com/cve-alert-cve-2026-105212-zitadel-zitadel/

RedPacket Security CVE Alert: CVE-2026-105212 - zitadel - zitadel - RedPacket Security ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other

Post #123386 18 Oct 4, 2026, 18:01 UTC

HackerOne Bug Bounty Disclosure: libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement-codec-yalguun-tumenkhuu - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement-codec-yalguun-tumenkhuu/

RedPacket Security HackerOne Bug Bounty Disclosure: libmariadb-mariadb-connector-c-stack-overflow-via-server-controlled-field-length-in-prepared-statement… CompanyMariaDB

Post #123385 14 Oct 4, 2026, 17:13 UTC

[QILIN] - Ransomware Victim: Emser - https://www.redpacketsecurity.com/qilin-ransomware-victim-emser/

RedPacket Security [QILIN] - Ransomware Victim: Emser - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123384 11 Oct 4, 2026, 17:12 UTC

[QILIN] - Ransomware Victim: Unident Group - https://www.redpacketsecurity.com/qilin-ransomware-victim-unident-group/

RedPacket Security [QILIN] - Ransomware Victim: Unident Group - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123383 12 Oct 4, 2026, 17:12 UTC

[QILIN] - Ransomware Victim: Chadwick Switchboards - https://www.redpacketsecurity.com/qilin-ransomware-victim-chadwick-switchboards/

RedPacket Security [QILIN] - Ransomware Victim: Chadwick Switchboards - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123382 7 Oct 4, 2026, 17:12 UTC

[BOOBA PROJECT] - Ransomware Victim: MorseLife Health System, Inc[.] - https://www.redpacketsecurity.com/booba-project-ransomware-victim-morselife-health-system-inc/

RedPacket Security [BOOBA PROJECT] - Ransomware Victim: MorseLife Health System, Inc[.] - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123381 14 Oct 4, 2026, 17:12 UTC

[STORM] - Ransomware Victim: Nipigon District Memorial Hospital - https://www.redpacketsecurity.com/storm-ransomware-victim-nipigon-district-memorial-hospital/

RedPacket Security [STORM] - Ransomware Victim: Nipigon District Memorial Hospital - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123380 15 Oct 4, 2026, 17:12 UTC

[QILIN] - Ransomware Victim: Cotesma - https://www.redpacketsecurity.com/qilin-ransomware-victim-cotesma/

RedPacket Security [QILIN] - Ransomware Victim: Cotesma - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123379 17 Oct 4, 2026, 15:14 UTC

[THEGENTLEMEN] - Ransomware Victim: Center State Engineering - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-center-state-engineering/

RedPacket Security [THEGENTLEMEN] - Ransomware Victim: Center State Engineering - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123378 15 Oct 4, 2026, 15:14 UTC

[KRYBIT] - Ransomware Victim: daralteb[.]com - https://www.redpacketsecurity.com/krybit-ransomware-victim-daralteb-com/

RedPacket Security [KRYBIT] - Ransomware Victim: daralteb[.]com - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Post #123377 10 Oct 4, 2026, 15:13 UTC

[QILIN] - Ransomware Victim: Mutsumi Group - https://www.redpacketsecurity.com/qilin-ransomware-victim-mutsumi-group/

RedPacket Security [QILIN] - Ransomware Victim: Mutsumi Group - RedPacket Security NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating

Older posts →