Understanding the Open edX Vulnerability The Open edX platform recently revealed a security flaw that allows attackers to exploit an unvalidated redirect_url parameter in survey views. This vulnerability emphasizes the need for robust server security measures, especially for hosting providers and web application developers. What Happened? When a non-existent survey name is requested, Open edX […]

CVE-2026-22675: Security Vulnerability Overview The recent discovery of CVE-2026-22675 highlights a critical security vulnerability in OCS Inventory NG Server. This stored cross-site scripting (XSS) vulnerability affects versions 2.12.3 and earlier. It enables unauthenticated attackers to execute arbitrary JavaScript in users' browsers, posing severe risks to server security. Understanding the Threat This vulnerability arises when attackers […]

Understanding the Open edX Vulnerability The Open edX platform recently revealed a security flaw that allows attackers to exploit an unvalidated redirect_url parameter in survey views. This vulnerability emphasizes the need for robust server security measures, especially for hosting providers and web application developers. What Happened? When a non-existent survey name is requested, Open edX […]

CVE-2026-22675: Security Vulnerability Overview The recent discovery of CVE-2026-22675 highlights a critical security vulnerability in OCS Inventory NG Server. This stored cross-site scripting (XSS) vulnerability affects versions 2.12.3 and earlier. It enables unauthenticated attackers to execute arbitrary JavaScript in users' browsers, posing severe risks to server security. Understanding the Threat This vulnerability arises when attackers […]

Start the New Year with this security quiz to test your knowledge and get a chance to receive the latest edition of ‘The Art of Server Protection’ e-book, or -- win our BitNinja Server Security for 1 month, absolutely free.  What a great way to start the New Year! Our ninjas created a short quiz […]

As we promised before, our article series inspired by V-day is continuing. Those who are provisioning servers day by day, certainly have some doubts about their process: being time-consuming, non-repeatable, hard to test or simply just something is going wrong in the existing infrastructure during the provisioning. There are opportunities to test failover or rollback processes, […]

What do you think about SPAMs? Most of us think they are useless and heavily annoying, but not for everybody. There are some geeks, who totally understand the background and find it rubbish, but sometimes they read them to “entertain themselves” and learn more about the recent patterns hacker tactics. Have you ever found a hidden […]

Bugs are always hunting us.  Recently we found some bugs during our work, but keep calm, they're not in the BitNinja agent. 😉 Let’s see what we explored: ModSecurity bug: empty comment line In our WAF2.0 (beta will come soon) we implemented ModSecurity as well as the OWASP’s core ruleset. Recently, our developers found a […]

No matter if you’re a Linux security veteran or you’re just about to get your feet wet, you’ll face the same security threats and upcoming attacks forms. Here we come with a security cheat sheet with ultimate checkpoints that no sysadmins should miss. When meeting new company, usually the very first thing I’m asked about […]

A new class of side-channel attacks have been appeared, which exploit the following CPU vulnerabilities: CVE-2017-5715 : branch target injection CVE-2017-5753 : bounds check bypass CVE-2017-5754 : rogue data cache load Meltdown and Spectre rely on them and allow the hackers to read the memory content of other programs, it means they can access the […]

What is a port? Ever since computers are able to run more programs at the same time and can connect to modern networks, ports became important. 3 things are needed for the communication between two machines: IP address of the host Port number Type of protocol (e.g. TCP, UDP) A port number is a 16-bit […]

Web applications pose a significant security risk to servers, and having a web application firewall (WAF) in place is vital to keeping your servers and your business running smoothly. The average web server faces thousands of attacks on a daily basis. There are a number of web application firewalls available to protect your server, and having […]

The number of cybersecurity breaches experienced in 2017 were really high, hackers kept themselves busy – just think about the WannaCry ransomware infecting Windows PCs. Furthermore, 2018 is almost here, and the future definitely holds many changes for you, Linux server operators, in the field of cybersecurity. As security always comes first, now it’s time […]

Understanding CVE-2026-35475: An Open Redirect Vulnerability The recent CVE-2026-35475 vulnerability discovered in WeGIA poses significant threats to server security. This issue arises from an open redirect—allowing attackers to redirect users to malicious sites. As web application vulnerabilities continue to evolve, system administrators and hosting providers must remain vigilant. Incident Summary WeGIA, a web management system […]

Introduction to WeGIA Vulnerability The WeGIA Open Redirect vulnerability poses significant risks to hosting providers and system administrators. Identified in versions prior to 3.6.9, this flaw allows attackers to exploit the web application, redirecting users to malicious sites. Understanding this vulnerability is crucial for enhancing server security and user safety. Summary of the Incident WeGIA, […]

Understanding CVE-2026-5631 and Its Implications The digital landscape is ever-evolving, and so are the threats to server security. A recent vulnerability, CVE-2026-5631, has emerged in the assafelovic gpt-researcher application. It highlights the need for vigilance among system administrators and hosting providers. What Is CVE-2026-5631? CVE-2026-5631 raises concerns due to its potential for code injection via […]