Messages

1

Updates / Did 0.9.8.1239 remove extra DB users?

« on: July 01, 2026, 06:00:25 AM »

Since this night, I'm missing my extra DB users on multiple servers.
Not all, only the ones with a different name than the DB itself.

Is that related to the last update?

2

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 10:08:01 PM »

Pleases update cwp sh /scripts/update_cwp

0.9.8.1235 that is fast!

3

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 10:05:55 PM »

Well, this is so bad that I feel uncomfortable that share it now publicly when there is no fix.

But I can say this:
BLOCK THIS IP NOW!!!! 152.53.173.29 that is the C&C server.

EDIT: Where can I send a message to an dev?

This is a Netcup IP, and they are very good at suspending service of hackers on their network.

You can send the hacker info to: abuse@netcup.de

Great, I send them a mail aswel.


89.248.172.118 is also good to block, it gave the original payload, but it's apparently an IP from an 'bulletproof hoster'.

4

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 07:24:20 PM »

Well, this is so bad that I feel uncomfortable that share it now publicly when there is no fix.

But I can say this:
BLOCK THIS IP NOW!!!! 152.53.173.29 that is the C&C server.

EDIT: Where can I send a message to an dev?

5

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 06:54:34 PM »

I found an entry point and an the privilage escalation that is currently atacking my servers. Should I post it here?