CVE Alert: CVE-2025-52920
Vulnerability Summary: CVE-2025-52920 Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. Anyone...
OSINT
CVE Alert: CVE-2025-52922
Vulnerability Summary: CVE-2025-52922 Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the...
CVE Alert: CVE-2025-27387
Vulnerability Summary: CVE-2025-27387 OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure. Affected...
[METAENCRYPTOR] – Ransomware Victim: The Lowell Hotel New York
Ransomware Group: METAENCRYPTOR VICTIM NAME: The Lowell Hotel New York NOTE: No files or stolen information are by RedPacket Security....
[AKIRA] – Ransomware Victim: Datrose
Ransomware Group: AKIRA VICTIM NAME: Datrose NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[AKIRA] – Ransomware Victim: Sweeney Design
Ransomware Group: AKIRA VICTIM NAME: Sweeney Design NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Keystone Shipping
Ransomware Group: AKIRA VICTIM NAME: Keystone Shipping NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: VS Associates
Ransomware Group: AKIRA VICTIM NAME: VS Associates NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Integrity Mortgage
Ransomware Group: AKIRA VICTIM NAME: Integrity Mortgage NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[LYNX] – Ransomware Victim: motorsport-de-la-capitale
Ransomware Group: LYNX VICTIM NAME: motorsport-de-la-capitale NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[LYNX] – Ransomware Victim: lurie-glass
Ransomware Group: LYNX VICTIM NAME: lurie-glass NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[QILIN] – Ransomware Victim: www[.]covenanthealth[.]net
Ransomware Group: QILIN VICTIM NAME: wwwcovenanthealthnet NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2025-52878
Vulnerability Summary: CVE-2025-52878 In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions Affected Endpoints: No...
CVE Alert: CVE-2025-52879
Vulnerability Summary: CVE-2025-52879 In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible Affected Endpoints: No...
CVE Alert: CVE-2025-6513
Vulnerability Summary: CVE-2025-6513 Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt...
CVE Alert: CVE-2025-52877
Vulnerability Summary: CVE-2025-52877 In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible Affected Endpoints: No affected endpoints...
CVE Alert: CVE-2025-6512
Vulnerability Summary: CVE-2025-6512 On a client with a non-admin user, a script can be integrated into a report. The reports...
CVE Alert: CVE-2025-4563
Vulnerability Summary: CVE-2025-4563 A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks....
CVE Alert: CVE-2025-52967
Vulnerability Summary: CVE-2025-52967 gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation. Affected Endpoints: No affected endpoints listed. Published Date: 6/23/2025,...
CVE Alert: CVE-2025-52876
Vulnerability Summary: CVE-2025-52876 In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible Affected Endpoints: No affected...
CVE Alert: CVE-2025-52875
Vulnerability Summary: CVE-2025-52875 In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible Affected Endpoints:...
CVE Alert: CVE-2025-52968
Vulnerability Summary: CVE-2025-52968 xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (For example,...
[AKIRA] – Ransomware Victim: Access Financial
Ransomware Group: AKIRA VICTIM NAME: Access Financial NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Seppeler Gruppe
Ransomware Group: AKIRA VICTIM NAME: Seppeler Gruppe NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
