RedPacket Security

[SAFEPAY] - Ransomware Victim: duhaas[.]sk - https://www.redpacketsecurity.com/safepay-ransomware-victim-duhaas-sk/

[INTERLOCK] - Ransomware Victim: H&L Manufacturing - https://www.redpacketsecurity.com/interlock-ransomware-victim-h-l-manufacturing/

HackerOne Bug Bounty Disclosure: rustls-backend-discloses-out-of-bounds-heap-data-during-legal-imap-upload-cancellation-stze - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-rustls-backend-discloses-out-of-bounds-heap-data-during-legal-imap-upload-cancellation-stze/

HackerOne Bug Bounty Disclosure: imap-literal-size-truncation-on-bit-platforms-corrupts-downloads-and-desynchronizes-the-response-parser-mohammed-k-fathy - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-imap-literal-size-truncation-on-bit-platforms-corrupts-downloads-and-desynchronizes-the-response-parser-mohammed-k-fathy/

HackerOne Bug Bounty Disclosure: client-side-denial-of-service-dos-via-memory-exhaustion-on-password-reset-endpoint-dipesh-pokhrel - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-client-side-denial-of-service-dos-via-memory-exhaustion-on-password-reset-endpoint-dipesh-pokhrel/

HackerOne Bug Bounty Disclosure: html-injection-in-contact-form-email-enables-phishing-via-legitimate-infrastructure-tenzai - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-html-injection-in-contact-form-email-enables-phishing-via-legitimate-infrastructure-tenzai/

HackerOne Bug Bounty Disclosure: -use-after-free-read-of-the-freed-referer-buffer-in-curl-easy-setopt-curlopt-referer-stale-heap-bytes-transmitted-in-an-outbound-referer-heade-ferdinandus-lau-tae - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-use-after-free-read-of-the-freed-referer-buffer-in-curl-easy-setopt-curlopt-referer-stale-heap-bytes-transmitted-in-an-outbound-referer-heade-ferdinandus-lau-tae/

[SETTRA] - Ransomware Victim: windor[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-windor-com/

[QILIN] - Ransomware Victim: Onsemi - https://www.redpacketsecurity.com/qilin-ransomware-victim-onsemi/

CVE Alert: CVE-2026-105172 - itsourcecode - Online Admission System - https://www.redpacketsecurity.com/cve-alert-cve-2026-105172-itsourcecode-online-admission-system/

CVE Alert: CVE-2026-105170 - kishor-23 - food-waste-management-system - https://www.redpacketsecurity.com/cve-alert-cve-2026-105170-kishor-23-food-waste-management-system/

CVE Alert: CVE-2026-105175 - SourceCodester - Drug Recommendation System - https://www.redpacketsecurity.com/cve-alert-cve-2026-105175-sourcecodester-drug-recommendation-system/

[MEDUSALOCKER] - Ransomware Victim: Rueegseggerag - https://www.redpacketsecurity.com/medusalocker-ransomware-victim-rueegseggerag/

[AURORA] - Ransomware Victim: Infomedia A/S - https://www.redpacketsecurity.com/aurora-ransomware-victim-infomedia-a-s/

[BYOD] - Ransomware Victim: Franklin Empire - https://www.redpacketsecurity.com/byod-ransomware-victim-franklin-empire/

[DOOMMAGEDDON] - Ransomware Victim: Cam Group LLC - https://www.redpacketsecurity.com/doommageddon-ransomware-victim-cam-group-llc/

[MEDUSALOCKER] - Ransomware Victim: Millensys - https://www.redpacketsecurity.com/medusalocker-ransomware-victim-millensys/

[DOOMMAGEDDON] - Ransomware Victim: ENKA Schools - https://www.redpacketsecurity.com/doommageddon-ransomware-victim-enka-schools/

[EMPERADOR] - Ransomware Victim: METROCOLOR S[.]A[.] - https://www.redpacketsecurity.com/emperador-ransomware-victim-metrocolor-s-a/

[N0N] - Ransomware Victim: Company #1 - https://www.redpacketsecurity.com/n0n-ransomware-victim-company-1/