The recent discovery of a cross-site scripting vulnerability in the itsourcecode E-Logbook poses significant risks for hosting providers and server administrators. This vulnerability affects version 1.0 of the E-Logbook, specifically through the manipulation of the 'profile_id' parameter in the check_profile.php file. Attackers can exploit this weakness remotely, leading to potential data breaches. The Implication for […]

The cybersecurity landscape is ever-evolving. Recently, a significant vulnerability known as CVE-2025-10367 has been identified in the MiczFlor RPi-Jukebox-RFID. This flaw affects versions up to 2.8.0 and allows for remote cross-site scripting attacks. As system administrators and hosting providers, understanding this threat is crucial for maintaining server security. Overview of the Vulnerability The vulnerability found […]

The recent discovery of a cross-site scripting vulnerability in the itsourcecode E-Logbook poses significant risks for hosting providers and server administrators. This vulnerability affects version 1.0 of the E-Logbook, specifically through the manipulation of the 'profile_id' parameter in the check_profile.php file. Attackers can exploit this weakness remotely, leading to potential data breaches. The Implication for […]

The cybersecurity landscape is ever-evolving. Recently, a significant vulnerability known as CVE-2025-10367 has been identified in the MiczFlor RPi-Jukebox-RFID. This flaw affects versions up to 2.8.0 and allows for remote cross-site scripting attacks. As system administrators and hosting providers, understanding this threat is crucial for maintaining server security. Overview of the Vulnerability The vulnerability found […]

A part of our Ninjastic Team participated in WHD Global in Rust, Germany for the second time. We gained a lot of experience, made new friends, learned about the trends of our industry and broadened our customer base. If you want to see the exhibition through the Ninjas' eyes, read on. The WHD staff really […]

This week we released a new version of BitNinja, which contains many significant performance improvements. But what are the changes exactly? We limited the SS usage of our Outbound WAF module. It will only use SS if a malicious request is caught. Its result will be a significant drop in BitNinja's CPU usage. Our SenseLog […]

Last week the Chief Content Manager of HostAdvice, a company who provides transparent and handy advice for those who are looking for Hosting Providers, interviewed our CEO George Egri about the nitty-gritty details of BitNinja. They have covered topics like: Why this product is better than other solutions George's views about the future of security […]

XML-RPC attacks are “trending” nowadays. If you search for “XML-RPC attack” on Google, you can see approximately 380,000 results. Most of the articles deal with XML-RPC attacks on WordPress-based websites. What is XML-RPC? RPC stands for remote procedure call and XML is the abbreviation of Extensible Markup Language. XML is widely used to represent data […]

In this article we will be dealing with OpenShift and Kubernetes technology. You can find some explanations about the terms used at the end of the article. If you want to take the neccessary steps to upgrade your own application, the first thing to do will be turning your pile of code into a container […]

Do you have a monolithic application (for example a complex server-side enterprise application) with big features like support varieties of different clients, API for 3rd parties and some integrations with other web services and message brokers? Code usage is tolerable, but you want to release a smashing feature in the future, though you do not […]

In the last 2 weeks, we released 2 new versions of BitNinja. Let’s take a look at the novelties: BitNinja version 1.12.10: CaptchaChallenge pages now use 403 status code instead of 200. Good bots will notice it and leave it. This means, that the good bots will recognize our captcha pages, and won’t walk around […]

Before the expansion of Windows Operational Systems and the creation of the Linux, the world was ruled by UNIX systems. The UNIX was used predominantly in the 1980’s. Despite of its positive traits it was mainly used by research centers, institutes and school’s operational system. It can be thanked partly to its price, and also […]

This time of the year is always very cheerful. It’s the holiday season; everyone is happy and excited with all the festivities going on. But it’s important to be careful, especially during the holidays and going into the new year. Hackers prey during this time period, distractions from the season are all around. Hackers need […]

The cybersecurity landscape evolves constantly. Recently, a significant vulnerability, CVE-2025-10359, has emerged affecting the Wavlink WL-WN578W2 wireless router. This vulnerability centers around an OS command injection flaw linked to the sub_404DBC function in the /cgi-bin/wireless.cgi file. It allows attackers to manipulate the macAddr argument remotely and execute arbitrary commands on the server. Why This Matters […]

The realm of cybersecurity constantly evolves, presenting new challenges for system administrators and hosting providers. An important update has emerged regarding a security vulnerability known as CVE-2025-10340, which targets the WhatCD Gazelle application. This blog explores the implications of this vulnerability and offers actionable recommendations. Incident Overview This critical vulnerability is identified as a cross-site […]

A critical security vulnerability has been identified affecting Wavlink WL-WN578W2 devices. This vulnerability pertains to an OS command injection flaw that allows attackers to execute malicious commands via a compromised interface. As this exploit can be initiated remotely, the risk is significantly increased for users globally. Understanding the Vulnerability The vulnerability, designated CVE-2025-10358, specifically affects […]