SQL Injection Vulnerability in itsourcecode's Construction Management System Recently, a significant security vulnerability was identified in itsourcecode's Construction Management System version 1.0. This flaw, found in the borrowedtool.php file, can be exploited to perform SQL injection attacks. Such attacks allow malicious actors to execute arbitrary SQL code, leading to various harmful outcomes including data theft […]

Understanding the Recent Vulnerabilities in IBM Concert Software The cybersecurity landscape is constantly evolving, challenging system administrators and hosting providers to stay vigilant. One recent development that has raised alarms is the vulnerability discovered in IBM Concert software. This vulnerability impacts the server security of various systems, specifically versions 1.0.0 through 2.2.0 of the IBM […]

SQL Injection Vulnerability in itsourcecode's Construction Management System Recently, a significant security vulnerability was identified in itsourcecode's Construction Management System version 1.0. This flaw, found in the borrowedtool.php file, can be exploited to perform SQL injection attacks. Such attacks allow malicious actors to execute arbitrary SQL code, leading to various harmful outcomes including data theft […]

Understanding the Recent Vulnerabilities in IBM Concert Software The cybersecurity landscape is constantly evolving, challenging system administrators and hosting providers to stay vigilant. One recent development that has raised alarms is the vulnerability discovered in IBM Concert software. This vulnerability impacts the server security of various systems, specifically versions 1.0.0 through 2.2.0 of the IBM […]

TLDR: You’ve asked for this many times We created BitNinja with a vision in mind: let’s make the internet a safer place together! During the past few months, we’ve been so focused on the first part that we almost forgot about the most important bit - ‘together.’ To be completely honest, we’ve been terrible at […]

You might already have the feeling that something is in the making. We have recently published a release note telling the news about our VzLinux certification. But now it is out! BitNinja Server Security is integrated with the Virtuozzo Application Platform - the elastic, high-performance Platform as a Service solution! And we are heading for […]

We will never limit the rate of our development process!  The rate of cyber attacks grows without limits day by day! Hmm, can you guess the topic of our new release note? 😏 Yes, it is about Rate Limiting. Our users have asked for it and we delivered: with the 2.29.0 version of BitNinja, we […]

We were busy working on something important. We believe we need to fight off hackers on more fronts, and we are committed to our vision of BitNinja as a simple and frictionless security service that is compatible with multiple platforms.  BitNinja supports most modern Linux distributions, but something was missing. So, we are happy to […]

Security can be manageable. Security can be translated into profit. We understand that in the competitive web hosting industry, providers need efficient, stable, and resource-friendly solutions so that they can focus on growth and high-value pursuits. So, with the release of our WHMCS module, we've made sure that managing and generating additional revenue has become […]

On the 10th of December, bleepingcomputer.com reported an exploit for a critical zero-day vulnerability called "Log4Shell". It has been exposed for the Apache Log4j Java-based logging platform used to access the web server and application logs. About the vulnerability To exploit this vulnerability, an attacker could modify the user agent of a web browser to access the […]

Since the beginning of the 2000s, phishing has been the most popular tool used by attackers to steal sensitive information, and it works. Everyone, from the CEO of a company to the average user, is regularly targeted.  A successful phishing attack can retrieve your confidential information that may be used to do nasty stuff like […]

We won’t stop until we have caught all of the malware around the world. With this in mind, we made some developments again in the Anti-Malware Module. Let’s see what has changed! Refreshed Anti-Malware Section on the Console It is now much easier to start a Malware Scan. Just go to the Anti-Malware section on […]

A Fresh Approach to Cybersecurity Planning for Web Hosters In modern times websites are a key pillar for doing business. What looks appealing and engaging on the front end takes considerable effort to maintain on the backend. Treated as a commodity, these digital spaces are challenged every second of the day. The frontline of maintaining […]

Introduction to CVE-2026-5705 The cybersecurity landscape continually evolves, posing new challenges for system administrators and hosting providers. Recently, a significant vulnerability, identified as CVE-2026-5705, has been reported in the code-projects Online Hotel Booking software. This vulnerability affects the booking endpoint, enabling remote exploitation through cross-site scripting (XSS). Understanding and mitigating such vulnerabilities is critical for […]

Understanding the CVE-2026-5692 Vulnerability CVE-2026-5692 is a serious command injection vulnerability identified in the Totolink A7100RU router. The issue arises in the function setGameSpeedCfg within the file /cgi-bin/cstecgi.cgi. By manipulating the argument enable, attackers can execute arbitrary operating system commands from a remote location. Why This Matters for Hosting Providers For system administrators and hosting […]

Understanding the Open edX Vulnerability The Open edX platform recently revealed a security flaw that allows attackers to exploit an unvalidated redirect_url parameter in survey views. This vulnerability emphasizes the need for robust server security measures, especially for hosting providers and web application developers. What Happened? When a non-existent survey name is requested, Open edX […]