SQL Injection Vulnerability in itsourcecode's Construction Management System Recently, a significant security vulnerability was identified in itsourcecode's Construction Management System version 1.0. This flaw, found in the borrowedtool.php file, can be exploited to perform SQL injection attacks. Such attacks allow malicious actors to execute arbitrary SQL code, leading to various harmful outcomes including data theft […]

Understanding the Recent Vulnerabilities in IBM Concert Software The cybersecurity landscape is constantly evolving, challenging system administrators and hosting providers to stay vigilant. One recent development that has raised alarms is the vulnerability discovered in IBM Concert software. This vulnerability impacts the server security of various systems, specifically versions 1.0.0 through 2.2.0 of the IBM […]

SQL Injection Vulnerability in itsourcecode's Construction Management System Recently, a significant security vulnerability was identified in itsourcecode's Construction Management System version 1.0. This flaw, found in the borrowedtool.php file, can be exploited to perform SQL injection attacks. Such attacks allow malicious actors to execute arbitrary SQL code, leading to various harmful outcomes including data theft […]

Understanding the Recent Vulnerabilities in IBM Concert Software The cybersecurity landscape is constantly evolving, challenging system administrators and hosting providers to stay vigilant. One recent development that has raised alarms is the vulnerability discovered in IBM Concert software. This vulnerability impacts the server security of various systems, specifically versions 1.0.0 through 2.2.0 of the IBM […]

Why WAF Pro Stands Apart Traditional Web Application Firewalls (WAFs) rely on web server modules like ModSecurity, which often introduce performance bottlenecks and complex configurations. BitNinja WAF Pro is a next-generation, standalone solution designed specifically for shared hosting and VPS environments, delivering superior protection without compromising speed, flexibility, or server resources. Previously, configuring a WAF […]

At BitNinja, we’re committed to continuously refining our security solutions to keep your servers protected against ever-evolving threats. The latest updates (3.10.35 & 3.10.36) introduce improvements, particularly in WordPress integrity checks, WAF management, and process analysis. These updates enhance both security detection capabilities and system stability. What’s New in BitNinja 3.10.35 & 3.10.36? Malware Detection: […]

BitNinja is gearing up for CloudFest 2025, inviting attendees to Booth R30 for an exclusive two-month extended trial of their advanced server security solutions. Founder Zsolt will be speaking at the event, sharing insights into the company's mission to tackle evolving security challenges. BitNinja's offerings include AI-powered malware detection that identifies obfuscated and zero-day threats […]

In today’s digital world, businesses are no longer confined by borders. As a hosting provider or reseller, you have the opportunity to expand your reach and tap into new markets—but language barriers can often stand in the way. That’s where BitNinja’s Internationalization (i18n) feature comes in. We’re excited to announce that i18n is now live, […]

At BitNinja, we're always working to refine and optimize our security solutions to ensure seamless protection for your servers. The 3.10.34 release brings several improvements, addressing malware detection, configuration parsing, and SSL termination issues. These updates enhance usability, increase compatibility, and reinforce system stability. BitNinja 3.10.34 Malware Detection: We’ve extended the user whitelist CLI command […]

At just 29 years old, Mark Bacsko brings infectious energy and sharp focus to his role as Chief Product Officer at BitNinja. A tinkerer at heart, he thrives on solving puzzles—whether it’s DIY electronics projects or crafting custom gaming setups. You might already recognize him from our video series, where his passion for BitNinja shines […]

We’re excited to announce the release of BitNinja 3.10.33, featuring improvements to MalwareDetection and Process Analysis. These updates enhance your server security experience and incorporate user feedback for smoother performance. BitNinja 3.10.33 Malware Detection: Improved Logging: Enhanced the quality and clarity of system logs, providing administrators with more actionable and detailed information. Optimized AI Scan […]

At Bitninja, we believe in the power of experience and deep understanding of our users' needs. That's why we're excited to reintroduce Mark Bacsko—a seasoned leader who has been serving as our Chief Product Officer for some time, continuing to drive innovation and excellence at BitNinja. But Mark isn’t alone in this journey. Behind every […]

Introduction to CVE-2026-5705 The cybersecurity landscape continually evolves, posing new challenges for system administrators and hosting providers. Recently, a significant vulnerability, identified as CVE-2026-5705, has been reported in the code-projects Online Hotel Booking software. This vulnerability affects the booking endpoint, enabling remote exploitation through cross-site scripting (XSS). Understanding and mitigating such vulnerabilities is critical for […]

Understanding the CVE-2026-5692 Vulnerability CVE-2026-5692 is a serious command injection vulnerability identified in the Totolink A7100RU router. The issue arises in the function setGameSpeedCfg within the file /cgi-bin/cstecgi.cgi. By manipulating the argument enable, attackers can execute arbitrary operating system commands from a remote location. Why This Matters for Hosting Providers For system administrators and hosting […]

Understanding the Open edX Vulnerability The Open edX platform recently revealed a security flaw that allows attackers to exploit an unvalidated redirect_url parameter in survey views. This vulnerability emphasizes the need for robust server security measures, especially for hosting providers and web application developers. What Happened? When a non-existent survey name is requested, Open edX […]