Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

At Bitninja, we believe in the power of experience and deep understanding of our users' needs. That's why we're excited to reintroduce Mark Bacsko—a seasoned leader who has been serving as our Chief Product Officer for some time, continuing to drive innovation and excellence at BitNinja. But Mark isn’t alone in this journey. Behind every […]

The BitNinja team had an amazing time at WordCamp Nederland 2024, blending learning, networking, and a touch of local charm. From insightful workshops to engaging conversations, the event was a highlight of the WordPress community calendar. Insights and Industry Connections Networking with hosting providers, developers, and exhibitors was a standout aspect of the event. These […]

We’re excited to introduce new BitNinja version, packed with fixes and an exciting new update channel for early-beta testing. Here’s what’s new in this release: BitNinja 3.10.32 Malware Detection: Fixed a problem that caused duplicate scans on the same file, ensuring more efficient and accurate malware detection. SandboxScanner Addressed an issue with the reload functionality, […]

This release introduces improvements to IP filtering, malware detection, and log analysis, ensuring even better performance and compatibility for your servers. Here’s a detailed look at what’s new: BitNinja 3.10.31 IP Filter ProxyFilter Reload in CSF Post Script - The IP Filter module now includes a ProxyFilter reload added to the CSF post script. This […]

As a BitNinja reseller, you play a key role in ensuring your clients are well-informed about their security status. Transparency is not just a courtesy—it’s a cornerstone of building trust and demonstrating your value. With our API-based reporting feature, you can now generate and share detailed, customized reports that provide your clients with full visibility […]

We are excited to share the latest updates and improvements in BitNinja. Our team has been working hard to bring you enhanced features and fixes to ensure your server security is as robust as possible. Here’s what’s new in the latest releases: BitNinja 3.10.30 The 3.10.30 release introduces improvements for SQL and sandbox scanning, focusing […]

This guide will walk you through how to find, install, and use the BitNinja module within the ispmanager interface. We’ll also cover some key tips to ensure smooth operation. Steps to Install BitNinja Installing the BitNinja module in ispmanager is quick and straightforward. Follow these steps: How to Access BitNinja After Installation After installation, you […]

Fighting spam is an ongoing challenge that many of our customers face. Unprotected forms on websites—whether they are registration, comment, or contact forms—can easily become targets for spambots and malicious attacks. While these forms are designed to enhance the user experience, they can unfortunately be exploited by attackers. At BitNinja, we’re constantly working to keep […]

We’re excited to announce the release of BitNinja-Reliable-Auto-Update (RAU) 1.0.2, a feature-packed update that gives you more control and flexibility over how BitNinja updates are managed on your servers. This latest version introduces new options for choosing update channels and fine-tunes how the auto-updater interacts with your system, making it easier than ever to stay […]

Understanding CVE-2025-64179 and Its Impact on Server Security Recently, a critical vulnerability known as CVE-2025-64179 was discovered in lakeFS, an open-source tool that transforms object storage into Git-like repositories. The flaw allowed unauthenticated access to the /api/v1/usage-report/summary endpoint, enabling anyone to retrieve aggregate API usage counts. Though no sensitive information is disclosed, this vulnerability can […]

Introduction to ThinkDashboard Vulnerability The recent discovery of a vulnerability in ThinkDashboard underscores the importance of robust server security. This vulnerability allows attackers to upload arbitrary files via the backup import feature, exposing potential risks for server administrators and hosting providers. Overview of the Vulnerability Identified as CVE-2025-64176, this flaw affects versions 0.6.7 and below […]

Understanding CVE-2025-62047 for Server Security The latest cybersecurity report highlights a critical vulnerability in the WordPress Case Addons plugin. This flaw could allow unauthorized file uploads, significantly increasing risks for server security. System administrators and hosting providers must take immediate action to mitigate these threats. Background of the Vulnerability The CVE-2025-62047 vulnerability is identified as […]