Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

In the world of cybersecurity, malware reinfection is a pressing concern. Recently, our threat management team discovered a malware variant responsible for a significant portion of these reinfections. This article focuses on a particular type of malware, breaks down how it operates and sheds light on its connection to other malicious files, such as blue.php. […]

Our biggest service pack in a long time to finally squash some of the most elusive bugs, along with some new creature comforts, to make your day-to-day interactions easier. All this, and even more in our new BitNinja version (V3.5.0) Most systems will automatically update, if you have specific settings or applications preventing automatic updates, […]

Effective threat management is necessary for a stable and secure digital environment in server security. At BitNinja, we understand the importance of this component and have implemented a proficient Threat Management Team to keep our system impervious to harmful incursions. This team's consistent efforts have made BitNinja a more potent server security platform. Our Threat […]

We are excited to announce a significant milestone in the development of our platform - the Cloud Configuration solution. Our team has been working tirelessly to create a user-friendly way to simplify the process of modifying server configurations for all users. We believe that this new feature will help you manage your server settings easily, […]

Cloud Configuration is (finally) ready! I'm happy to say, that you can now access Cloud Configuration by navigating to the Configuration tab, or by clicking this link. You can manage your servers' configuration from a centralized place, making rollout effortless! If you need any assistance or have some questions, you can find its documentation page […]

As fans eagerly await the return of Netflix's "Wednesday" series for its second season, malware by the same name has already made its mark. Last year, our threat management team discovered a malware they called "Wednesday 5.5", which caused havoc on servers around the world. Now, the malware has evolved to "Wednesday 5.6" with several […]

We are excited to announce that BitNinja is now compatible with Enhance, the powerful multi-server hosting control panel. Web hosting has evolved beyond the era of simply hosting a website on a single server, requiring web hosts to manage their infrastructure effectively. This is where Enhance enters the picture, joining forces with BitNinja to create […]

Who doesn't want faster scans? We've made sure to make this wish a reality, and to crush some bugs along the way! All this, and more in our new BitNinja version (V3.3.1) Most systems will automatically update, if you have specific settings or applications preventing automatic updates, you can follow our documentation on how to […]

BitNinja is now compatible with Enhance, so their users can enjoy top-notch protection. Working closely with their team also allows us to have full UI integration in the near future! An article will soon follow this release note that covers it in more detail. Most systems will automatically update, if you have specific settings or […]

Understanding CVE-2025-64179 and Its Impact on Server Security Recently, a critical vulnerability known as CVE-2025-64179 was discovered in lakeFS, an open-source tool that transforms object storage into Git-like repositories. The flaw allowed unauthenticated access to the /api/v1/usage-report/summary endpoint, enabling anyone to retrieve aggregate API usage counts. Though no sensitive information is disclosed, this vulnerability can […]

Introduction to ThinkDashboard Vulnerability The recent discovery of a vulnerability in ThinkDashboard underscores the importance of robust server security. This vulnerability allows attackers to upload arbitrary files via the backup import feature, exposing potential risks for server administrators and hosting providers. Overview of the Vulnerability Identified as CVE-2025-64176, this flaw affects versions 0.6.7 and below […]

Understanding CVE-2025-62047 for Server Security The latest cybersecurity report highlights a critical vulnerability in the WordPress Case Addons plugin. This flaw could allow unauthorized file uploads, significantly increasing risks for server security. System administrators and hosting providers must take immediate action to mitigate these threats. Background of the Vulnerability The CVE-2025-62047 vulnerability is identified as […]