#webmin — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #webmin, aggregated by home.social.
-
CVE-2019-15107 - Changed to Known Ransomware Status
Webmin Command Injection VulnerabilityVendor: WebminProduct: WebminAn issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: May 22, 2026 at 19:00:35 UTCDate Added to KEV: 2022-03-25View CVE Details
-
CVE-2019-15107 - Changed to Known Ransomware Status
Webmin Command Injection VulnerabilityVendor: WebminProduct: WebminAn issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: May 22, 2026 at 19:00:35 UTCDate Added to KEV: 2022-03-25View CVE Details
-
Server-Admin-Tool: Angreifer können #2FA von #Webmin umgehen | Security https://www.heise.de/news/Server-Admin-Tool-2FA-von-Webmin-umgehbar-11298189.html #Patchday
-
Server-Admin-Tool: Angreifer können #2FA von #Webmin umgehen | Security https://www.heise.de/news/Server-Admin-Tool-2FA-von-Webmin-umgehbar-11298189.html #Patchday
-
Webmin is hardened & clustered w/ three total nodes, ns1, ns2, and ns3 etc. I will eventually add clustered nodes on two other locations so records are still served when one cluster's host is down.
https://tech.haacksnetworking.org/2025/12/29/authoritative-dns-w-bind-9/ feedback welcome.
Added larger tmp directory & source-IPd vhost so webmin won't lock. Obv, make sure you use static, dedicated, & fully hardened external IPs for permitted list.
#selfhosted #homelab #sysadmin #linux #dns #webmin #opensource #freesoftware #networking
-
Webmin is hardened & clustered w/ three total nodes, ns1, ns2, and ns3 etc. I will eventually add clustered nodes on two other locations so records are still served when one cluster's host is down.
https://tech.haacksnetworking.org/2025/12/29/authoritative-dns-w-bind-9/ feedback welcome.
Added larger tmp directory & source-IPd vhost so webmin won't lock. Obv, make sure you use static, dedicated, & fully hardened external IPs for permitted list.
#selfhosted #homelab #sysadmin #linux #dns #webmin #opensource #freesoftware #networking
-
Siempre he deseado aprender más de lo que mi capacidad me ha permitido. Desde que descubrí que existen sistemas más allá de "ventanas" y "manzanas" y además libres de seguimiento y telemetría, ha sido un no parar. Quiero agradecer a cuentas como: @sl1200, @caleb, @Sr_Polilla, @__End3r__ y muchos más que con sus tutoriales, mensajes y aportes a la comunidad permiten que gente como yo pueda aprendar cada día un poco más de estos temas.
#selfhosting #debian #yunohost #nextcloud #webmin -
Siempre he deseado aprender más de lo que mi capacidad me ha permitido. Desde que descubrí que existen sistemas más allá de "ventanas" y "manzanas" y además libres de seguimiento y telemetría, ha sido un no parar. Quiero agradecer a cuentas como: @sl1200, @caleb, @Sr_Polilla, @__End3r__ y muchos más que con sus tutoriales, mensajes y aportes a la comunidad permiten que gente como yo pueda aprendar cada día un poco más de estos temas.
#selfhosting #debian #yunohost #nextcloud #webmin -
Как наказать цифрового воробья или как я проходил таск PigeonsRevenge от платформы ACLabs.pro
Данный таск был частью 5 сезона CTF, который проходил на площадке ACLabs. Машина необычная с увлекательным сюжетом и интересными уязвимостями. Условие задачи: Борис — старый почтовый голубь. Катя, его голубка, улетела к наглому Воробью. Три дня Борис пил дешёвое пойло и строчил план мести. Теперь этот план у тебя. Помоги Борису пробраться в цифровое гнездо Воробья, украсть его аккаунт и стать рутом. Следуй за пьяными записками — там всё сказано и даже больше. Внимание, стенд будет полностью готов только по истечении обратного времени отсчета, даже если адрес появился раньше! Цепочка атаки Атакующая цепочка «PigeonsRevenge» комбинирует одну реальную критическую CVE (Webmin 1.910 — CVE-2019-15107, 9.8 CRITICAL) с набором классических техник ATT&CK : активная разведка → port knocking → эксплуатация публичного приложения → Metasploit reverse-shell → туннелирование Ligolo-ng → инъекция через переменную окружения в кастомный бинарник → обход фильтра табуляцией → закрепление с root -привилегиями.
https://habr.com/ru/articles/1024360/
#nmap #bash #docker #ssh #ghidra #cve #webmin #metasploit #privelege_escalation #pivoting
-
@possiblylinux127 tbh, it seems a plain vanilla #FreeBSD with a proper configured #Webmin and a few additional modules (ex. https://github.com/karmantyu/ZFSgame ) will do the job nicely.
-
@possiblylinux127 tbh, it seems a plain vanilla #FreeBSD with a proper configured #Webmin and a few additional modules (ex. https://github.com/karmantyu/ZFSgame ) will do the job nicely.
-
Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!
With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.
-
Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!
With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.
-
Discover Webmin — an open-source, browser-based GUI that makes Linux server management simple and powerful. Perfect for sysadmins and curious tinkerers. Watch for setup tips and handy features! #Webmin #Linux #OpenSource #Server #SysAdmin #DevOps #SelfHosted #English
https://pt.opensourceisawesome.com/videos/watch/ef6ee124-331c-49f1-bca6-1dee7fd04063 -
Discover Webmin — an open-source, browser-based GUI that makes Linux server management simple and powerful. Perfect for sysadmins and curious tinkerers. Watch for setup tips and handy features! #Webmin #Linux #OpenSource #Server #SysAdmin #DevOps #SelfHosted #English
https://pt.opensourceisawesome.com/videos/watch/ef6ee124-331c-49f1-bca6-1dee7fd04063 -
Con una recente comunicazione ufficiale, Google ha annunciato la dismissione del fetch POP3 da account esterni in Gmail. Chi utilizzava questa funzione per consolidare più caselle email in Gmail si trova ora a dover migrare verso una soluzione alternativa: l’inoltro automatico (email forwarding) direttamente dal server di posta sorgente.
Questa guida documenta il processo completo per configurare correttamente l’inoltro da un dominio custom gestito con Postfix e Webmin verso Gmail, risolvendo i problemi di autenticazione SPF/DKIM che causano il blocco con errore 550 5.7.26.
Il problema: Gmail rifiuta le email inoltrate
Attivando l’inoltro automatico dal proprio server di posta verso Gmail, si riceve quasi immediatamente un bounce con questo errore:
text550-5.7.26 Your email has been blocked because the sender is unauthenticated.
Gmail requires all senders to authenticate with either SPF or DKIM.
DKIM = did not pass
SPF [dominio-originale.com] with ip: [IP-del-tuo-server] = did not pass
La causa è strutturale: quando il server di posta inoltra un messaggio, il mittente nell’envelope (Return-Path) rimane quello originale (es. [email protected]), ma l’IP che effettua la consegna è quello del tuo server. Gmail verifica l’SPF del dominio originale contro l’IP del tuo server — e ovviamente fallisce, perché il tuo server non è autorizzato a inviare per conto di domini terzi.
[…]
#CPostsrsd #DKIM #DMAR #dns #emailAuthentication #emailForwarding #gmail #linux #postfix #selfHosting #SPF #SRS #webmin https://www.b0sh.net/2026/02/gmail-abbandona-il-pop3-fetch-come-configurare-linoltro-email-con-spf-dkim-e-srs-su-postfix/ -
Con una recente comunicazione ufficiale, Google ha annunciato la dismissione del fetch POP3 da account esterni in Gmail. Chi utilizzava questa funzione per consolidare più caselle email in Gmail si trova ora a dover migrare verso una soluzione alternativa: l’inoltro automatico (email forwarding) direttamente dal server di posta sorgente.
Questa guida documenta il processo completo per configurare correttamente l’inoltro da un dominio custom gestito con Postfix e Webmin verso Gmail, risolvendo i problemi di autenticazione SPF/DKIM che causano il blocco con errore 550 5.7.26.
Il problema: Gmail rifiuta le email inoltrate
Attivando l’inoltro automatico dal proprio server di posta verso Gmail, si riceve quasi immediatamente un bounce con questo errore:
text550-5.7.26 Your email has been blocked because the sender is unauthenticated.
Gmail requires all senders to authenticate with either SPF or DKIM.
DKIM = did not pass
SPF [dominio-originale.com] with ip: [IP-del-tuo-server] = did not pass
La causa è strutturale: quando il server di posta inoltra un messaggio, il mittente nell’envelope (Return-Path) rimane quello originale (es. [email protected]), ma l’IP che effettua la consegna è quello del tuo server. Gmail verifica l’SPF del dominio originale contro l’IP del tuo server — e ovviamente fallisce, perché il tuo server non è autorizzato a inviare per conto di domini terzi.
[…]
#CPostsrsd #DKIM #DMAR #dns #emailAuthentication #emailForwarding #gmail #linux #postfix #selfHosting #SPF #SRS #webmin https://www.b0sh.net/2026/02/gmail-abbandona-il-pop3-fetch-come-configurare-linoltro-email-con-spf-dkim-e-srs-su-postfix/ -
Te lo Enseño y Te Lo Cuento, Webmin, Cockpit y Windows Admin Center
-
-
-
How to Install #Webmin on #VPS Server (12-Step Quick-Start Guide)
This article provides a guide for server administrators who want to install Webmin on VPS server with VPS Panel.
What is Webmin?
Webmin is a free and open source server control panel software, distributed under the BSD license, with support for web, DNS, database, FTP and ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-webmin-on-vps-server-using-virtualizor/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #vpsguide #clickserverinstallation #vpspanel #installguide #opensource #controlpanel #vpsplatform -
How to Install #Webmin on #VPS Server (12-Step Quick-Start Guide)
This article provides a guide for server administrators who want to install Webmin on VPS server with VPS Panel.
What is Webmin?
Webmin is a free and open source server control panel software, distributed under the BSD license, with support for web, DNS, database, FTP and ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-webmin-on-vps-server-using-virtualizor/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #vpsplatform #opensource #vpsguide #installguide #vpspanel #controlpanel #clickserverinstallation -
Got a bit panic-scared by my website's database going down this morning, with #VirtualMin not clearly telling me that it was due to MariaDB having crashed due to an out-of-memory problem, so I filed this little UX issue: https://github.com/virtualmin/virtualmin-gpl/issues/1095
…and then filed this somewhat more important issue about needing an integrated way to detect and repair crashed #MariaDB / #MySQL tables: https://github.com/virtualmin/virtualmin-gpl/issues/1096
-
Got a bit panic-scared by my website's database going down this morning, with #VirtualMin not clearly telling me that it was due to MariaDB having crashed due to an out-of-memory problem, so I filed this little UX issue: https://github.com/virtualmin/virtualmin-gpl/issues/1095
…and then filed this somewhat more important issue about needing an integrated way to detect and repair crashed #MariaDB / #MySQL tables: https://github.com/virtualmin/virtualmin-gpl/issues/1096
-
Move aside #Webmin, #Cockpit has become my new favorite tool for managing my remote servers! (Over #Tailscale.) I don't even have #ssh enabled any more. No need.
-
🖥️ Ein uralter iMac Core Duo dient via #Yunohost (#Debian #Bookworm) als #MastodonServer , beherbergt ein #WordPress und eine #NextCloud , administriert mit #Webmin – leider fehlt bisher eine Steuerung des Bildschirms, so dass ca. 10 Zeilen Linux-Start-Meldungen immer sichtbar sind, wodurch sich diese vermutlich einbrennen werden.
Per DualBoot läuft auch ein Debian #BullsEye, mit dem zur Not das primäre System repariert werden kann. -
In this article, you will learn how to install Webmin on Debian 12 and how to configure access to the Webmin interface.
Keep reading:👇
https://greenwebpage.com/community/how-to-install-and-configure-webmin-on-debian-12/#controlpanel #dashboard #automation #webmin #debian #linuxadministration #greenwebpage
-
#Usermin 2.300 has been released (#Webmin / #Virtualmin / #Webmail) https://webmin.com/usermin/
-
#Usermin 2.300 has been released (#Webmin / #Virtualmin / #Webmail) https://webmin.com/usermin/
-
#Webmin 2.400 has been released (#Virtualmin / #Usermin / #WebHostingControlPanel) https://webmin.com/
-
#Webmin 2.400 has been released (#Virtualmin / #Usermin / #WebHostingControlPanel) https://webmin.com/
-
#Webmin: a critical security vulnerability discovered in a widely-used web-based system administration tool, allowing authenticated attackers to escalate privileges to root level and execute code.
Caused by CRLF injection: CVE-2025-2774 (CVSS 8.8)
👇
https://cybersecuritynews.com/webmin-vulnerability-escalate-privileges/ -
#Webmin: a critical security vulnerability discovered in a widely-used web-based system administration tool, allowing authenticated attackers to escalate privileges to root level and execute code.
Caused by CRLF injection: CVE-2025-2774 (CVSS 8.8)
👇
https://cybersecuritynews.com/webmin-vulnerability-escalate-privileges/ -
How to Install #Webmin on #VPS Server Using Virtualizor
This article provides a guide for server administrators who want to install Webmin on VPS server with VPS Panel.
What is Webmin?
Webmin is a free and open source server control panel software, distributed under the BSD license, with support for web, DNS, database, FTP and email ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-webmin-on-vps-server-using-virtualizor/?utm_source=mastodon&utm_medium=social&utm_campaign=ReviveOldPost #vpsguide #controlpanel #clickserverinstallation #vpsplatform #opensource #installguide #vpspanel -
How to Install #Webmin on #VPS Server Using Virtualizor
This article provides a guide for server administrators who want to install Webmin on VPS server with VPS Panel.
What is Webmin?
Webmin is a free and open source server control panel software, distributed under the BSD license, with support for web, DNS, database, FTP and email ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-webmin-on-vps-server-using-virtualizor/?utm_source=mastodon&utm_medium=social&utm_campaign=ReviveOldPost #vpspanel #installguide #opensource #controlpanel #clickserverinstallation #vpsguide #vpsplatform -
How to Install #Webmin on #VPS Server Using Virtualizor
This article provides a guide for server administrators who want to install Webmin on VPS server with VPS Panel.
What is Webmin?
Webmin is a free and open source server control panel software, distributed under the BSD license, with support for web, DNS, database, FTP and email ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-webmin-on-vps-server-using-virtualizor/?utm_source=mastodon&utm_medium=social&utm_campaign=ReviveOldPost #installguide #opensource #clickserverinstallation #vpsplatform #vpsguide #controlpanel #vpspanel -
I should also point out that #Webmin is not exposed to the open internet. It used to be, before I installed #Tailscale, and back then every account required #MFA, but since I've transitioned to Tailscale for my intranet for all my servers both at home and remote Webmin is now only exposed to my #Tailnet. Which means that if Tailscale doesn't come up for some reason I need to login to the server console (royal pain in the ass but still.) #sysadmin #linux
-
#Virtualmin 7.30.6 has been released (#Webmin / #WebHostingControlPanel) https://virtualmin.com/
-
#Usermin 2.202 has been released (#Webmin / #Virtualmin / #Webmail) https://webmin.com/usermin/
-
#Webmin 2.302 has been released (#Virtualmin / #Usermin / #WebHostingControlPanel) https://webmin.com/
-
Because nothing happened, after a good hour #ssh had apparently had enough and broke the connection. Not cool.
Reinstalled the #webserver and installed #Webmin. It was ready after 10 minutes. But I'm overwhelmed by it. I'm already failing at requesting a #letsencrypt certificate. This is all becoming very unsatisfactory.
-
Weil nichts passierte, hatte nach einer guten Stunde #ssh offenbar die Faxen dicke und brach die Verbindung ab. Uncool.
Den #Webserver neu aufgesetzt und #Webmin installiert. Das stand nach 10 Minuten bereit. Allerdings bin ich damit überfordert. Ich scheitere schon damit, ein #letsencrypt Zertifikat anzufordern. Dass entwickelt sich alles sehr unbefriedigend.
-
I honestly didn't expect my first attempt with #ISPconfig to be error-free. But the interface shows everything is OK, even though 3 basic things aren't working. That's what quickly tempts me to act radically and rigorously. #VPS #Linux #Debian #FTP #DNS #letsencrypt
Maybe I should give #Webmin a chance?
-
Ich hatte ehrlich nicht den Anspruch, dass mein erster Versuch mit #ISPconfig fehlerfrei verläuft. Doch die Oberfläche weist alles in Ordnung aus, obwohl 3 elementare Dinge nicht funktionieren. Sowas verleitet mich schnell, radikal und rigoros zu handeln. #VPS #Linux #Debian #FTP #DNS #letsencrypt
Vielleicht sollte ich #Webmin eine Chance geben?
