Understanding CVE-2025-12509: A Cybersecurity Alert The recent discovery of CVE-2025-12509 has raised significant concerns among system administrators and hosting providers. This vulnerability allows unauthorized execution of Global_Shipping scripts in environments where there are admin users, particularly on the BRAIN2 server. Incident Overview The CVE-2025-12509 vulnerability can be exploited on a server by executing scripts with […]

Understanding CVE-2025-12552: A Cybersecurity Alert On October 31, 2025, CVE-2025-12552 was disclosed, highlighting an insufficient password policy affecting BLU-IC2 and BLU-IC4 systems. This vulnerability poses risks for server administrators, hosting providers, and web application developers. Summary of the Vulnerability The vulnerability allows attackers to exploit weak password policies, enabling brute-force attacks on affected systems. The […]

Understanding CVE-2025-12509: A Cybersecurity Alert The recent discovery of CVE-2025-12509 has raised significant concerns among system administrators and hosting providers. This vulnerability allows unauthorized execution of Global_Shipping scripts in environments where there are admin users, particularly on the BRAIN2 server. Incident Overview The CVE-2025-12509 vulnerability can be exploited on a server by executing scripts with […]

Understanding CVE-2025-12552: A Cybersecurity Alert On October 31, 2025, CVE-2025-12552 was disclosed, highlighting an insufficient password policy affecting BLU-IC2 and BLU-IC4 systems. This vulnerability poses risks for server administrators, hosting providers, and web application developers. Summary of the Vulnerability The vulnerability allows attackers to exploit weak password policies, enabling brute-force attacks on affected systems. The […]

In 2015 it was made publicly known that Hillary Clinton, being the United States Secretary of State, used her private email server for email conversations which ,not so long ago, turned out to contain classified and top secret information. The whole server has been investigated thorougly by the FBI in the hope of finding any […]

Many of our customers who use Cloudflare have recently notified us that they are not able to see the proper visitor IPs in the logs only the railgun server IPs. It is caused due to the fact that the requests are not directly coming from Cloudflare, so mod_cloudflare will not restore the IP’s of the […]

Spammers are enemies of all sysadmins, because they are altering their tactics day by day. Keeping softwares up-to-date on your servers is not always as easy and solvable as we might think. Even though you have the latest application which is protected against the known security risks, you can have a lot of user-related contents which […]

We are convinced that almost all server owners have to struggle with the maintenance of their server, which is not always as easy and transparent as we would assume.  Our treasured servers are vulnerable, sensitive and exposed to many many types of attacks, exploits or malfunctions. That is why we have to take care of […]

The real geek escaped from one Ninjastic developer of ours lately, and in his freetime he decided to try to install BitNinja on his Raspberry Pi 2 model B. And guess what happened? He was successful! What is more, BitNinja also captured some attacks with its port honeypot module. Now, let me describe you the […]

CVE-2016-5696 Linux Kernel vulnerability has been recognized two weeks ago by some watchful researchers , who immediately informed the world of the Internet about the potential dangers waiting for them. This vulnerability can be exploited by an attack called with the umbrella term: “man in the middle attack” and is mainly conducted by off-path hackers. RedHat […]

Did you know that using IPv6 on your server can completely bypass all your security? On Linux, there are separate kernel stacks, and separate mechanisms to filter traffic for the original IPv4 traffic and for IPv6. The kernel module responsible for this filtration is called ipfilter, and there is an other module called ipfilter6 for […]

The Kali Linux is an open source code operational system which is based in Debian. In the system we can find several „penetration” applications, such as: Aircrack-ng Hydra Nmap Wireshark Metasplot framework Maltego Owasp-Zap SQLMap John Burpsuite Johnny Pyrit SIPcrack PWdump Rainbowcrack Maskgen Hexinject SSLSniff Dsniff In this article, I am going to tell you […]

We are happy to announce that our developers officially released the port honeypot module. The port honeypot is a perfect way to fight against zero-day attacks and many of our customers are satisfied with it because the module catches and entraps hackers who attempt to break into or scan their servers making them aware of the […]

Understanding CVE-2025-64389: A Serious Threat to Your Linux Server The recent discovery of CVE-2025-64389 has raised important alarm bells in the cybersecurity community. As server administrators and hosting providers, it is critical to grasp the implications of this vulnerability and take appropriate measures to safeguard your systems. Overview of CVE-2025-64389 CVE-2025-64389 involves the insecure exchange […]

Introduction to CVE-2025-64388 The cybersecurity landscape continues to evolve, introducing new threats daily. One of the recent critical vulnerabilities, CVE-2025-64388, highlights significant risks for system administrators and hosting providers alike. This vulnerability allows attackers to exploit specific packets, leading to potential denial of service (DoS) on web servers. Understanding this threat is crucial in safeguarding […]

Understanding the CVE-2025-34278 Vulnerability The recent CVE-2025-34278 vulnerability affects versions of Nagios Network Analyzer prior to 2024R1. This weakness entails a stored Cross-Site Scripting (XSS) risk located in the Source Groups page, specifically in the percentile calculator menu. An attacker can leverage this vulnerability by injecting harmful scripts that remain stored and can later run […]