Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

At BitNinja, we continuously fine-tune our security solutions to deliver better performance, enhanced compatibility, and improved protection. Our latest releases—BitNinja 3.10.37 & 3.10.38—bring updates to WAF management, spam detection, process analysis, and configuration parsing. What’s New in BitNinja 3.10.38? SpamDetection More Accurate Log Filtering Fine-tuned log detection mechanisms, reducing false positives while maintaining efficiency in […]

Why WAF Pro Stands Apart Traditional Web Application Firewalls (WAFs) rely on web server modules like ModSecurity, which often introduce performance bottlenecks and complex configurations. BitNinja WAF Pro is a next-generation, standalone solution designed specifically for shared hosting and VPS environments, delivering superior protection without compromising speed, flexibility, or server resources. Previously, configuring a WAF […]

At BitNinja, we’re committed to continuously refining our security solutions to keep your servers protected against ever-evolving threats. The latest updates (3.10.35 & 3.10.36) introduce improvements, particularly in WordPress integrity checks, WAF management, and process analysis. These updates enhance both security detection capabilities and system stability. What’s New in BitNinja 3.10.35 & 3.10.36? Malware Detection: […]

BitNinja is gearing up for CloudFest 2025, inviting attendees to Booth R30 for an exclusive two-month extended trial of their advanced server security solutions. Founder Zsolt will be speaking at the event, sharing insights into the company's mission to tackle evolving security challenges. BitNinja's offerings include AI-powered malware detection that identifies obfuscated and zero-day threats […]

In today’s digital world, businesses are no longer confined by borders. As a hosting provider or reseller, you have the opportunity to expand your reach and tap into new markets—but language barriers can often stand in the way. That’s where BitNinja’s Internationalization (i18n) feature comes in. We’re excited to announce that i18n is now live, […]

At BitNinja, we're always working to refine and optimize our security solutions to ensure seamless protection for your servers. The 3.10.34 release brings several improvements, addressing malware detection, configuration parsing, and SSL termination issues. These updates enhance usability, increase compatibility, and reinforce system stability. BitNinja 3.10.34 Malware Detection: We’ve extended the user whitelist CLI command […]

At just 29 years old, Mark Bacsko brings infectious energy and sharp focus to his role as Chief Product Officer at BitNinja. A tinkerer at heart, he thrives on solving puzzles—whether it’s DIY electronics projects or crafting custom gaming setups. You might already recognize him from our video series, where his passion for BitNinja shines […]

We’re excited to announce the release of BitNinja 3.10.33, featuring improvements to MalwareDetection and Process Analysis. These updates enhance your server security experience and incorporate user feedback for smoother performance. BitNinja 3.10.33 Malware Detection: Improved Logging: Enhanced the quality and clarity of system logs, providing administrators with more actionable and detailed information. Optimized AI Scan […]

Understanding CVE-2025-64179 and Its Impact on Server Security Recently, a critical vulnerability known as CVE-2025-64179 was discovered in lakeFS, an open-source tool that transforms object storage into Git-like repositories. The flaw allowed unauthenticated access to the /api/v1/usage-report/summary endpoint, enabling anyone to retrieve aggregate API usage counts. Though no sensitive information is disclosed, this vulnerability can […]

Introduction to ThinkDashboard Vulnerability The recent discovery of a vulnerability in ThinkDashboard underscores the importance of robust server security. This vulnerability allows attackers to upload arbitrary files via the backup import feature, exposing potential risks for server administrators and hosting providers. Overview of the Vulnerability Identified as CVE-2025-64176, this flaw affects versions 0.6.7 and below […]

Understanding CVE-2025-62047 for Server Security The latest cybersecurity report highlights a critical vulnerability in the WordPress Case Addons plugin. This flaw could allow unauthorized file uploads, significantly increasing risks for server security. System administrators and hosting providers must take immediate action to mitigate these threats. Background of the Vulnerability The CVE-2025-62047 vulnerability is identified as […]