#cyberpanel — Public Fediverse posts

CVE Alert: CVE-2026-71965 - usmannasir - cyberpanel - https://www.redpacketsecurity.com/cve-alert-cve-2026-71965-usmannasir-cyberpanel/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-71965 #usmannasir #cyberpanel

CVE Alert: CVE-2026-71966 - usmannasir - cyberpanel - https://www.redpacketsecurity.com/cve-alert-cve-2026-71966-usmannasir-cyberpanel/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-71966 #usmannasir #cyberpanel

🛠️ Ghid CyberPanel: Totul despre comanda modprobe și gestionarea modulelor de Kernel în Linux!

În sistemele de operare Linux, kernelul folosește module încărcabile (Loadable Kernel Modules - LKM) pentru a adăuga suport pentru drivere hardware, sisteme de fișiere sau protocoale de rețea din mers, fără a necesita repornirea sistemului. Ghidul CyberPanel explică modul în care comanda modprobe simplifică gestionarea acestor module.

✨ Ce este modprobe și prin ce se diferențiază de insmod?

Deși ambele utilitare au rolul de a încărca module în kernel:
• insmod este un utilitar de nivel coborât care necesită calea exactă către fișierul .ko al modulului și nu gestionează dependențele (dacă modulul depinde de altul, comanda va eșua).
• modprobe este instrumentul inteligent de nivel înalt. Acesta consultă fișierele de dependențe (generate de depmod) și încarcă sau elimină automat toate modulele dependente necesare.

🛠️ Comenzi și opțiuni fundamentale modprobe:

Încărcarea unui modul în kernel:
Adaugă modulul specificat împreună cu toate dependențele sale:

Bash
sudo modprobe nume_modul
Exemplu (încărcarea modulului pentru suport de criptare):

Bash
sudo modprobe aes_generic
Eliminarea (descărcarea) unui modul:
Folosind opțiunea -r (remove), modulul este eliminat din memorie (dacă nu este utilizat activ de un alt proces):

Bash
sudo modprobe -r nume_modul
Modul Dry-Run (Simulare):
Opțiunea -n sau --dry-run afișează acțiunile pe care le-ar executa comanda fără a modifica efectiv starea kernelului:

Bash
sudo modprobe -v -n nume_modul
Vizualizarea informațiilor despre un modul (modinfo):
Deși este o comandă separată, modinfo completează utilizarea modprobe afișând autorul, descrierea, parametrii acceptați și dependențele unui modul:

Bash
modinfo nume_modul
🚫 Blocarea (Blacklist) modulelor nedorite:

Dacă dorești ca un anumit modul să nu fie încărcat automat la pornirea sistemului (de exemplu, un driver video sursă deschisă precum nouveau când folosești drivere NVIDIA proprietare), poți crea un fișier de configurare în /etc/modprobe.d/:

Bash
echo "blacklist nume_modul" | sudo tee /etc/modprobe.d/blacklist-nume_modul.conf
Un utilitar fundamental pentru orice administrator de sistem care dorește să configureze plăci de rețea, dispozitive de stocare sau să diagnosticheze probleme hardware la nivelul kernelului Linux! 🚀

#Linux #Kernel #SysAdmin #modprobe #CyberPanel #LinuxDrivers #OpenSource #TechNews

CVE-2026-65917 - IDOR in Cyberpanel IncBackups allows authenticated users to access/delete other tenants' backups via sequential job IDs. CVSS 8.8. No patch yet. Isolate or restrict access now. #CVE #CyberPanel #infosec

https://www.valtersit.com/cve/CVE-2026-65917/

CVE Alert: CVE-2021-47949 - Cyberpanel - CyberPanel - https://www.redpacketsecurity.com/cve-alert-cve-2021-47949-cyberpanel-cyberpanel/

#OSINT #ThreatIntel #CyberSecurity #cve-2021-47949 #cyberpanel #

For anyone w interest in running servers/VPS ... looks like #CyberPanel is NOT the way to go.

This is on a BRAND new #VPS (<1hr old) on Ubuntu 22.04... NOTHING else installed.

1. spin up new VPS
2. log in w SSH
3. update packages w apt
4. run CyberPanel install
5. login to CyberPanel

that's it.

Хостинг-панели с открытым и закрытым кодом. Какие решения выбирают клиенты?

Какие панели управления хостингом действительно востребованы у клиентов? Мы проанализировали реальные заказы на серверы и сравнили популярные решения — от бесплатных FASTPANEL и CyberPanel до платных ispmanager, cPanel и Plesk. Подробная статистика, сравнение функционала и цен ждут вас в статье.

https://habr.com/ru/companies/hostkey/articles/934228/

#хостингпанель #статистика #FASTPANEL #cyberpanel #cpanel #plesk #ispmanager #opensourse #hostkey

СyberPanel Command Injection Vulnerability (CVE-2024-51378)

В программном обеспечении CyberPanel обнаружена уязвимость, связанная с обходом аутентификации и выполнением произвольных команд через эндпоинты /dns/getresetstatus и /ftp/getresetstatus . Уязвимость присутствует в файлах dns/views.py и ftp/views.py версий до 2.3.7 включительно.

https://habr.com/ru/articles/866866/

#CyberPanel #cve #CVE202451378 #rce #web

CISA added the #Cleo bug to the KEV list today. Notable that this is the second recent vuln (after the #CyberPanel bug) added to the KEV that CISA explicitly said is being used by ransomware gangs

https://therecord.media/cisa-ransomware-cleo-cyberpanel-bugs

CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure – Source: www.securityweek.com https://ciso2ciso.com/cyberpanel-vulnerabilities-exploited-in-ransomware-attacks-shortly-after-disclosure-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #CyberPanel #ransomware #Exploited

CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure https://www.securityweek.com/cyberpanel-vulnerabilities-exploited-in-ransomware-attacks-shortly-after-disclosure/ #Malware&Threats #Ransomware #CyberPanel #ransomware #exploited

CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure https://www.securityweek.com/cyberpanel-vulnerabilities-exploited-in-ransomware-attacks-shortly-after-disclosure/ #Malware&Threats #Ransomware #CyberPanel #ransomware #exploited

@beyondmachines1 oops. #infosec #cyberpanel #website

💊 If you have been affected by the #CyberPanel ransomware, not all hope is lost.

We prepared a decryptor for you to restore your data:

https://gist.github.com/gboddin/d78823245b518edd54bfc2301c5f8882#file-0-decrypt-sh

⚠️ We've worked with the team to get to the bottom of the #CyberPanel mass killing spree, TLDR, it's PSAUX ransomware.

One of our source rooted the box launching ransomware attacks:

List of files provided:
https://gist.github.com/gboddin/d78823245b518edd54bfc2301c5f8882

Thx @Chocapikk_
for helping on the analysis

29-10-2024 14:00

🔴 Looks like someone took some liberty and wiped 20k #CyberPanel instances as they all started responding 500s.

This covers about ~150k websites.

~400 vulnerable host remain up out of 22k.

Thanks for the ping @Gi7w0rm

I always forget you folks on Mastodon :|

Time for some #CyberPanel updates:

28 October 2024 14:00

🚨 Detection for CyberPanel's 0day has been added.

~22k vulnerable instances have been found.

Hosting providers & CERTs have been notified, patch now!

Credits: X/@dreyand_

Thanks: X/@Chocapikk_

@andyfragen @ru I think the thing for me that is a hard sell is that SpinupWP is just a layer on top of a cloud hosting providers, like #DigitalOcean. I can already spin up a 1-click #CyberPanel with #OpenLiteSpeed droplet with little effort and cut out the extra cost, this would be at the Personal level. For my personal stuff I just can't justify spending $40/mo on top of VPS costs of $15+/mo for full support/management.

@depi I'll have to remember that one. In an ideal world I wish that #OpenLiteSpeed officially supported #arm64 and that other web control panels besides #CyberPanel worked with OpenLiteSpeed. ControlPanel looks nice but doesn't support OpenLiteSpeed. Even if there was a web control panel, that supported arm64, and also supported running #Docker containers I'd go that route. Right now I'm planning on just using Docker to run OLS on my arm64 instance.

@depi ha, yeah, actually after having posted that I happened upon #Portainer and have started going that route to a degree, I also have #Webmin / #Virtualmin installed for the non #Docker stuff. So far things are working OK. I'm not super enthused about having 2 separate web consoles running, I really prefer #CyberPanel but it doesn't have a working build for #arm64 at this time.

@TheADHDHobbyist I've been using #WordPress for years. I actually have a MultiSite setup so it's just a matter of adding an additional site and setting up some domain mapping on my existing WordPress instance. I have my own #VPS on #DigitalOcean so I can actually spin up on additional sites on it. I used the #CyberPanel / #OpenLiteSpeed droplet on Digital Ocean which makes it super simple to manage a bunch of sites. I can even run #Docker containers using CyberPanel.

Anyone recommend a good web-based server/website management panel that runs on #arm64 and ideally #OpenLiteSpeed? I've been happily using #CyberPanel for a few years but it requires x86_64/amd64 and won't install on an arm64 system. I know that I can manage it all by hand, and even manually compile OpenLiteSpeed for arm64 but I'm not sure how far down the DIY rabbit hole I want to go here.

this is the first time that i am going to install #cyberpanel on my #vps #server.

Ditch Shared Hosting: Digital Ocean (or other hosting provider) plus CyberPanel - Easy and Fast Web Hosting for WordPress, etc. https://squeet.me/objects/962c3e1086ca9639c894ec2c2f053e3059d52b54