Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

Critical Security Flaw in ThinkDashboard System administrators and hosting providers need to stay vigilant against emerging threats. Recently, a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64177) was discovered in ThinkDashboard, a self-hosted bookmark management tool. This flaw could potentially allow attackers to execute malicious scripts through user interactions, such as clicking on crafted links. Understanding the […]

Understanding CVE-2025-64178: Jellysweep Vulnerability The recent discovery of CVE-2025-64178 highlights a significant security vulnerability in Jellysweep, a popular cleanup tool for the Jellyfin media server. This article will delve into the details of the vulnerability, its implications for server security, and practical steps hosting providers can take to mitigate the risk. Incident Overview CVE-2025-64178 pertains […]

The increasing number of data breaches raises new concerns for all companies. According to Statista, there were 1,473 million data breaches causing 164 million exposed records in the US in 2019. Many companies are being sued for data breaches and since the implementation of the General Data Protection Regulation (GDPR), these cybersecurity lawsuits run into […]

Botnets are a major threat for web hosting providers and basically for every server. They are the fundamentals of cybercrime in the dark industry of hackers. A botnet is a group of infected computers (aka bots or zombie machines) controlled by a hacker, the botmaster. Zombie machines can be personal computers, mobile devices, or even […]

28 Febr, 2020 16:44 PM UPDATE: We know that it was a hard decision for the organizers, and we feel really sorry that we can't meet with the wonderful cloud community in the Europa Park this year. However, it was the right decision because security always comes first. We, however, have a plan B. 😉 […]

Why should you visit tech conferences? As our world is changing quickly, new types of technologies are constantly being made. To keep up with the rapid pace of the technology changes and to learn more about the most advanced solutions, we highly recommend everyone to visit at least 1 tech conference every year. Fortunately, there […]

On 19 February 2020, Wordfence reported a highly critical vulnerability found in the popular Duplicator plugin for WordPress. This plugin is useful when users want to migrate and copy WordPress sites. With Duplicator, sysadmins can create a new copy of the site and the generated file can be downloaded from the WP dashboard. WordPress Duplicator Plugin Zero-day […]

Critical Issues for Companies Looking to Get On Board the 5G, AI Revolution As companies brace themselves for the ongoing fourth industrial revolution, cybersecurity remains high on the agenda. Executives are wary about the challenges that accompany emerging major technologies such as 5G, but Artificial Intelligence (AI) is widely regarded as a cyber-security life line. […]

Hackers and cyberattack techniques are evolving every day. Hosting companies and every server owner should keep an eye on the cybersecurity news to prepare themselves and protect their systems against the new types of threats. That’s why BitNinja collects the hottest cybersecurity news and sends out a Cybersecurity Digest each month. Now, we’ve summarized the […]

As 2019 will be over soon, it’s time to stop for a while and look back on what happened this year. 2019 was a unique year at BitNinja (you’ll see on the results). We got closer to our mission – making the internet a safer place. However, we couldn’t have reached the successes mentioned below […]

An exploited CMS vulnerability or vulnerabilities to web-based attacks is a big security issue as one well-aimed attack can cause a data leak, data loss or make your server unavailable. These attacks need to be stopped before they even reach your server and the WAF 2.0 module can do that for you. This powerful defense […]

Understanding CVE-2025-64179 and Its Impact on Server Security Recently, a critical vulnerability known as CVE-2025-64179 was discovered in lakeFS, an open-source tool that transforms object storage into Git-like repositories. The flaw allowed unauthenticated access to the /api/v1/usage-report/summary endpoint, enabling anyone to retrieve aggregate API usage counts. Though no sensitive information is disclosed, this vulnerability can […]

Introduction to ThinkDashboard Vulnerability The recent discovery of a vulnerability in ThinkDashboard underscores the importance of robust server security. This vulnerability allows attackers to upload arbitrary files via the backup import feature, exposing potential risks for server administrators and hosting providers. Overview of the Vulnerability Identified as CVE-2025-64176, this flaw affects versions 0.6.7 and below […]

Understanding CVE-2025-62047 for Server Security The latest cybersecurity report highlights a critical vulnerability in the WordPress Case Addons plugin. This flaw could allow unauthorized file uploads, significantly increasing risks for server security. System administrators and hosting providers must take immediate action to mitigate these threats. Background of the Vulnerability The CVE-2025-62047 vulnerability is identified as […]