The recent discovery of a cross-site scripting vulnerability in the itsourcecode E-Logbook poses significant risks for hosting providers and server administrators. This vulnerability affects version 1.0 of the E-Logbook, specifically through the manipulation of the 'profile_id' parameter in the check_profile.php file. Attackers can exploit this weakness remotely, leading to potential data breaches. The Implication for […]

The cybersecurity landscape is ever-evolving. Recently, a significant vulnerability known as CVE-2025-10367 has been identified in the MiczFlor RPi-Jukebox-RFID. This flaw affects versions up to 2.8.0 and allows for remote cross-site scripting attacks. As system administrators and hosting providers, understanding this threat is crucial for maintaining server security. Overview of the Vulnerability The vulnerability found […]

The recent discovery of a cross-site scripting vulnerability in the itsourcecode E-Logbook poses significant risks for hosting providers and server administrators. This vulnerability affects version 1.0 of the E-Logbook, specifically through the manipulation of the 'profile_id' parameter in the check_profile.php file. Attackers can exploit this weakness remotely, leading to potential data breaches. The Implication for […]

The cybersecurity landscape is ever-evolving. Recently, a significant vulnerability known as CVE-2025-10367 has been identified in the MiczFlor RPi-Jukebox-RFID. This flaw affects versions up to 2.8.0 and allows for remote cross-site scripting attacks. As system administrators and hosting providers, understanding this threat is crucial for maintaining server security. Overview of the Vulnerability The vulnerability found […]

WordPress is the most commonly used blog engine, which is free to use and has an open source code. It is used mainly for the operation of websites, blogs and webshops. If your purpose is to have a great website in a blink of an eye, which you are able to develop later in parallel […]

In 2015 it was made publicly known that Hillary Clinton, being the United States Secretary of State, used her private email server for email conversations which ,not so long ago, turned out to contain classified and top secret information. The whole server has been investigated thorougly by the FBI in the hope of finding any […]

Many of our customers who use Cloudflare have recently notified us that they are not able to see the proper visitor IPs in the logs only the railgun server IPs. It is caused due to the fact that the requests are not directly coming from Cloudflare, so mod_cloudflare will not restore the IP’s of the […]

Spammers are enemies of all sysadmins, because they are altering their tactics day by day. Keeping softwares up-to-date on your servers is not always as easy and solvable as we might think. Even though you have the latest application which is protected against the known security risks, you can have a lot of user-related contents which […]

We are convinced that almost all server owners have to struggle with the maintenance of their server, which is not always as easy and transparent as we would assume.  Our treasured servers are vulnerable, sensitive and exposed to many many types of attacks, exploits or malfunctions. That is why we have to take care of […]

The real geek escaped from one Ninjastic developer of ours lately, and in his freetime he decided to try to install BitNinja on his Raspberry Pi 2 model B. And guess what happened? He was successful! What is more, BitNinja also captured some attacks with its port honeypot module. Now, let me describe you the […]

CVE-2016-5696 Linux Kernel vulnerability has been recognized two weeks ago by some watchful researchers , who immediately informed the world of the Internet about the potential dangers waiting for them. This vulnerability can be exploited by an attack called with the umbrella term: “man in the middle attack” and is mainly conducted by off-path hackers. RedHat […]

Did you know that using IPv6 on your server can completely bypass all your security? On Linux, there are separate kernel stacks, and separate mechanisms to filter traffic for the original IPv4 traffic and for IPv6. The kernel module responsible for this filtration is called ipfilter, and there is an other module called ipfilter6 for […]

The Kali Linux is an open source code operational system which is based in Debian. In the system we can find several „penetration” applications, such as: Aircrack-ng Hydra Nmap Wireshark Metasplot framework Maltego Owasp-Zap SQLMap John Burpsuite Johnny Pyrit SIPcrack PWdump Rainbowcrack Maskgen Hexinject SSLSniff Dsniff In this article, I am going to tell you […]

The cybersecurity landscape evolves constantly. Recently, a significant vulnerability, CVE-2025-10359, has emerged affecting the Wavlink WL-WN578W2 wireless router. This vulnerability centers around an OS command injection flaw linked to the sub_404DBC function in the /cgi-bin/wireless.cgi file. It allows attackers to manipulate the macAddr argument remotely and execute arbitrary commands on the server. Why This Matters […]

The realm of cybersecurity constantly evolves, presenting new challenges for system administrators and hosting providers. An important update has emerged regarding a security vulnerability known as CVE-2025-10340, which targets the WhatCD Gazelle application. This blog explores the implications of this vulnerability and offers actionable recommendations. Incident Overview This critical vulnerability is identified as a cross-site […]

A critical security vulnerability has been identified affecting Wavlink WL-WN578W2 devices. This vulnerability pertains to an OS command injection flaw that allows attackers to execute malicious commands via a compromised interface. As this exploit can be initiated remotely, the risk is significantly increased for users globally. Understanding the Vulnerability The vulnerability, designated CVE-2025-10358, specifically affects […]