HawkTrace

HawkTrace Cyber Security

[HawkTrace @hawktrace]

New cPanel IOC

http://180[.]93[.]243[.]75:8080
http://45[.]140[.]164[.]151:8080/IXhwpJOUk4/blue.drx
http://180[.]93[.]243[.]75:8080/ovh
http://68[.]183[.]190[.]253/fav.ico|sh
https://raw[.]githubusercontent[.]com/nezhahq/scripts/main/agent/install.sh
#cpanel #ioc #malware

[HawkTrace @hawktrace]

Following the disclosure of the cPanel vulnerability CVE-2026-41940, threat actors wasted no time. Read our full breakdown to see exactly what they did once they were inside.

https://t.co/3QAh5ryOno

[HawkTrace @hawktrace]

IbWebAdmin Unauthenticated Remote Code Execution !!!
https://t.co/ckMrKlpl8G

#ibwebadmin #hawktrace #rce #unauth

[HawkTrace @hawktrace]

CVE-2025-60021 Apache bRPC - Remote Command Injection

JeControlProfile Controller > uri_extra_options > cmd_str *uri_extra_options > read_command_output > read_command_output_through_popen > popen

https://t.co/bszxA45DXj
https://t.co/J6by3MDuL3

#hawktrace #cve-2025-60021 #apache #brpc

[HawkTrace @hawktrace]

RT @int20z: Looks like the wrong cve analysis is just below😭😭

Maybe CVE-2025-59287

https://t.co/dxH5qLw1XS

[HawkTrace @hawktrace]

CVE-2025-59287 WSUS Remote Code Execution

https://t.co/FDEmQkoUR8

#infosec #wsus #cve-2025-59287

[HawkTrace @hawktrace]

Details on the critical RCE vulnerability we discovered in Microsoft Web Deploy CVE-2025-53772.

https://t.co/M24rxiwhAA

#iiswebdeploy #infosec #webdeploy #iis #cve-2025-53772

[HawkTrace @hawktrace]

CVE-2025-49704:
This vulnerability arises from the implementation of the SurrogateSelector interface.

CVE-2025-49706 authentication bypass, allows import/update operations on SharePoint WebPart components via the ToolPane endpoint.
Accordingly, you can contact the @hawktrace

[HawkTrace @hawktrace]

Against New Generation Threats, Innovative Defense Strategies.
https://t.co/WkouY0e0G1

#modernattack #hawktrace