Understanding CVE-2025-12509: A Cybersecurity Alert The recent discovery of CVE-2025-12509 has raised significant concerns among system administrators and hosting providers. This vulnerability allows unauthorized execution of Global_Shipping scripts in environments where there are admin users, particularly on the BRAIN2 server. Incident Overview The CVE-2025-12509 vulnerability can be exploited on a server by executing scripts with […]

Understanding CVE-2025-12552: A Cybersecurity Alert On October 31, 2025, CVE-2025-12552 was disclosed, highlighting an insufficient password policy affecting BLU-IC2 and BLU-IC4 systems. This vulnerability poses risks for server administrators, hosting providers, and web application developers. Summary of the Vulnerability The vulnerability allows attackers to exploit weak password policies, enabling brute-force attacks on affected systems. The […]

Understanding CVE-2025-12509: A Cybersecurity Alert The recent discovery of CVE-2025-12509 has raised significant concerns among system administrators and hosting providers. This vulnerability allows unauthorized execution of Global_Shipping scripts in environments where there are admin users, particularly on the BRAIN2 server. Incident Overview The CVE-2025-12509 vulnerability can be exploited on a server by executing scripts with […]

Understanding CVE-2025-12552: A Cybersecurity Alert On October 31, 2025, CVE-2025-12552 was disclosed, highlighting an insufficient password policy affecting BLU-IC2 and BLU-IC4 systems. This vulnerability poses risks for server administrators, hosting providers, and web application developers. Summary of the Vulnerability The vulnerability allows attackers to exploit weak password policies, enabling brute-force attacks on affected systems. The […]

Before I begin to explain CSRFs we need to understand some facts. First of all, we have to see how websites usually work when they have a login. Most pages use username/email and password for authentication. In today's world, it's not uncommon for newer sites to support two-step authentication. Normally we use a login once […]

In the previous blog article, we learned about SQL injection and how it works. If you read it then you will know that it belongs to the family of the most serious vulnerabilities. The next vulnerability is not going to be so serious, but it's worth taking care of. What is HTTP Parameter Pollution? The […]

A few days ago, we released a new agent version (1.23.3), which contains very important developments: We added two new SenseLog rules. The first one detects arbitrary file uploader bots, and the second one is for Joomla Spam regers. SenseLog is prepared for future remote config update. Instant blacklist action added to WAF Manager. It […]

The current world war isn’t happening in the physical world. However, cyber attacks have stepped into the foreground, and blackhat hackers can gain millions with their targeted attacks. Their main weapon in this war: malware. In this article, we’ll diversify the different types of malware so that you can better understand their behaviour. There are […]

We like attending meetups because we believe that great ideas are created when we share our experience and knowledge. That’s why we decided to organize regularly an IT security meetup in our town, Debrecen. On 24th August, we held our third meetup and we are so happy that the number of the attendees is increasing. […]

As a member of the BitNinja Development Team, one of our most important tasks is to develop the protection of BitNinja. When we deal with such a process we can see how an attack works or how a botnet can exploit a vulnerability. It's almost like watching these events behind the scenes. That's why this […]

Our world would be insecure without bug bounty platforms. We don’t know who we can or cannot trust. If we find a vulnerability in a software as a white hat hacker, we would be afraid to report it to the software owners because we wouldn’t know what their reaction would be. Will they reward or […]

The “Hello, Peppa!” botnet and the /ept/out.php vulnerability were newly discovered attacks by our Attack Vector Miner. But now, it has recognized the reactivation of a forgotten IoT botnet. This botnet exploits the D-Link router DSL-2750B  remote command execution. What does the attack look like?  The discovered pattern is the /login.cgi?cli= as you can see below:  In the case of the D-Link router DSL-2750B firmware 1.01 to 1.03, there’s an option for remote command […]

In a previous article, we’ve discussed the BitNinja safe minimum ruleset for the BitNinja WAF, that consists of 15 rules from the OWASP Core Ruleset, along with 6 rules from the BitNinja rules category. These rules can be safely enabled on the root location pattern on your server. In the BitNinja Ruleset, there are 5 […]

Understanding CVE-2025-64389: A Serious Threat to Your Linux Server The recent discovery of CVE-2025-64389 has raised important alarm bells in the cybersecurity community. As server administrators and hosting providers, it is critical to grasp the implications of this vulnerability and take appropriate measures to safeguard your systems. Overview of CVE-2025-64389 CVE-2025-64389 involves the insecure exchange […]

Introduction to CVE-2025-64388 The cybersecurity landscape continues to evolve, introducing new threats daily. One of the recent critical vulnerabilities, CVE-2025-64388, highlights significant risks for system administrators and hosting providers alike. This vulnerability allows attackers to exploit specific packets, leading to potential denial of service (DoS) on web servers. Understanding this threat is crucial in safeguarding […]

Understanding the CVE-2025-34278 Vulnerability The recent CVE-2025-34278 vulnerability affects versions of Nagios Network Analyzer prior to 2024R1. This weakness entails a stored Cross-Site Scripting (XSS) risk located in the Source Groups page, specifically in the percentile calculator menu. An attacker can leverage this vulnerability by injecting harmful scripts that remain stored and can later run […]