HawkTrace Research

Latest cybersecurity insights, threat analysis and expert perspectives

Threat Analysis

Security Solutions

Industry Insights

Categories:

CVE-2025-53772 IIS WebDeploy RCE

What IIS Web Deploy is and how it is deployed; the root cause of the unsafe deserialization chain using GZip + Base64 on the msdeploy.axd and msdeployagentservice path, data flow, PoC (Proof of Concept) request examples, monitoring methods, and permanent mitigation recommendations.

Batuhan Er•Security Researcher

September 1, 20257 min read

Security Research

CVE-2024-12106 WhatsUpGold Pre-Auth

Detailed analysis of CVE-2024-12106 affecting WhatsUpGold, demonstrating pre-auth LDAP injection and credential theft.

Batuhan Er•Security Researcher

January 1, 20254 min read

Database Security

SQL Server Smart Admin Agent RCE

Analyzing how SQL Server Smart Admin Agent works under the hood and how it can be abused for remote code execution.

Batuhan Er•Security Researcher

October 11, 20247 min read