Web Hosting
Giacomo Lanzi
HTTP / 3, everything you need to know about the latest version protocol
Security researchers have just digested the HTTP / 2 protocol, but web innovators are already publishing an update: HTTP / 3. This technology offers performance gains and security benefits, but only if we overcome the implementation problems that await us for what appears to be an evolutionary change rather than a real revolution in the way the web works. In…
Giacomo Lanzi
The threat of DDoS ransomware
Is the threat of a large-scale DDoS attack enough to convince organizations to bow to a ransomware attack? It might be a good time for companies to invest in DDoS protection , as hackers have begun to use the threat of large-scale DDoS attacks to carry out ransomware attacks on organizations . According to a new blog post from Cloudflare,…
Giacomo Lanzi
Protecting a site in WordPress: security package
Whether it’s WordPress or not, your website is potentially vulnerable to attack. Recent reports have shown that Google blacklists thousands of websites containing malware and phishing attacks every week. Considering how serious the potential security breaches can be for your business, we hope this article informs you why you should always protect your WordPress site. Is protecting a WordPress site…
Giacomo Lanzi
Plesk panel: available applications
On the web there are many open source applications that allow you to manage the most various situations. It is common practice for these applications to be available for installation from your hosting control panel. The Plesk panel makes no exceptions. So let’s see what are the main applications available for installation. How to install applications from the Plesk panel…
Giacomo Lanzi
PageSpeed Insight: better speed with Google
If the site is slow, you are losing customers. It’s very simple and there are no kinder ways to say the same thing. The speed of a site is directly proportional to the desire of a user to visit it. To measure your portal you can use a tool made available by Google: PageSpeed Insight. You can access this service…
Giacomo Lanzi
Node.js via SOD hosting panel
If you are interested in hosting Node.js apps on your web space, we have good news! The control panel offered by SOD, based on Plesk, is equipped with a Node.js extension that allows you to easily manage applications. In this article we see how it is possible to integrate Node through the control panel. Host a Node.js application from the…
Giacomo Lanzi
cPanel and Plesk the best for hosting management
Most hosting environments use an intuitive interface to help users manage their web spaces. Two very famous panels are cPanel and Plesk, widely used and offered in the SaaS formula. Without these graphical interfaces, it would be difficult to manage a hosting space and set up a site. A lot of time is usually spent managing a web space through…
Giacomo Lanzi
Updating php: why and how
PHP is one of the most popular scripting languages on the web today. According to W3Techs, PHP is used by over 82% of all websites that use a server-side programming language. This means that 8 out of 10 sites use PHP in one form or another. Being a scripting language, it is essential to update PHP to the latest version…
Giacomo Lanzi
Manage WordPress from the hosting panel
With Secure Online Desktop hosting plans, you have access to a convenient control panel. In addition to the collection of all information on the status of the server, the management of mailboxes and files, it is also possible to access a dedicated panel to manage WordPress in all its aspects. The section of the panel is called WordPress Toolkit and…
Giacomo Lanzi
Server hosting for SOD website
Based on what the actual need is, choosing hosting for a website is essential. The resources needed to host a fast and secure portal must be the basis on which to decide which plan to choose. Choosing the right provider for the server hosting plan can be complicated, and it’s easy to get lost in the alternatives that the network…
Giacomo Lanzi
Online hosting for websites
Online hosting is the process of using space on a remote server to host a website. The content of the pages (HTML, CSS, images, etc.) must be loaded into the server space to be reached online. Website hosting service providers have servers, connectivity and associated services for hosting online pages. By offering a variety of plans for online hosting, they…
Piergiorgio Venuti
CloudFlare free Plesk extension for Webhosting users
ClouCloudFlare protects your websites from online threats and DDoS attacks, while making them twice as fast around the world. CloudFlare runs a globally distributed network. Once you enable CloudFlare on your website via Plesk Admin Panel, the traffic routes through the CloudFlare network before it reaches your server. CloudFlare stops malicious web traffic, fights DDoS attacks and automatically caches and…
Piergiorgio Venuti
Let’s Encrypt Free Certificates for all Webhosting users
Let’s Encrypt is a free, automated and open Certification Authority. The objective of Let’s Encrypt and the ACME protocol is to make it possible to set up an HTTPS server and have it automatically obtain a browser-trusted certificate, without any human intervention. This is accomplished by running a certificate management agent on the web server. With our Webhosting service based on Plesk technology you…
Alessandro Stesi
WEB HOSTING
Now available the new WEB HOSTING service and domain registrations by Secure Online Desktop. The web hosting service with the 3 packages Starter, Business and Ultimate enable you to create professional websites, get Databases and create e-mail accounts, starting from € 29.99. For the most demanding companies are always at your disposal VPS services and Cloud Server solutions. Learn more……
Share
RSS
More Articles…
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
- NIS: what it is and how it protects cybersecurity
- Advanced persistent threats (APTs): what they are and how to defend yourself
- Penetration Testing and MFA: A Dual Strategy to Maximize Security
- Penetration Testing: Where to Strike to Protect Your IT Network
- Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
- Why IT audit and log management are important for Cybersecurity
- Red Team, Blue Team and Purple Team: what are the differences?
Categories …
- Backup as a Service (18)
- Acronis Cloud Backup (11)
- Veeam Cloud Connect (4)
- Cloud Conference (3)
- Cloud CRM (1)
- Cloud Server/VPS (22)
- Conferenza Cloud (4)
- Cyberfero (15)
- ICT Monitoring (5)
- Log Management (2)
- News (25)
- ownCloud (4)
- Privacy (7)
- Security (203)
- Cyber Threat Intelligence (CTI) (8)
- Deception (4)
- Ethical Phishing (11)
- Netwrix Auditor (2)
- Penetration Test (11)
- Posture Guard (3)
- SOCaaS (65)
- Vulnerabilities (84)
- Web Hosting (15)
Tags
Unknown Feed
Full Disclosure
- Unauthenticated Blind SQL Injection | RSI queue management system - V 3.0 | CVE-2025-26086 May 17, 2025Posted by Shaikh Shahnawaz on May 16[+] Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC [+] twitter.com/_striv3r_ [Vendor of Product] RSI Queue (https://www.rsiqueue.com/) [Vulnerability Type] Blind SQL Injection [Affected Component] The vulnerable component is the TaskID parameter in the get request. [CVE Reference] CVE-2025-26086 [Security Issue] An unauthenticated blind SQL injection vulnerability exists in […]
- CVE-2025-30072 Tiiwee X1 Alarm System - Authentication Bypass by Capture-replay May 17, 2025Posted by Sebastian Auwärter via Fulldisclosure on May 16Advisory ID: SYSS-2025-006 Product: Tiiwee X1 Alarm System Manufacturer: Tiiwee B.V. Affected Version(s): TWX1HAKV2 Tested Version(s): TWX1HAKV2 Vulnerability Type: Authentication Bypass by Capture-replay (CWE-294) Risk Level: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N Solution Status: Open Manufacturer Notification: 2025-01-27...
- SEC Consult SA-20250506-0 :: Honeywell MB Secure Authenticated Command Injection May 17, 2025Posted by SEC Consult Vulnerability Lab via Fulldisclosure on May 16SEC Consult Vulnerability Lab Security Advisory < 20250507-0 > ======================================================================= title: Authenticated Command Injection product: Honeywell MB-Secure vulnerable version: MB-Secure versions from V11.04 and prior to V12.53, MB-Secure PRO versions from V01.06 and prior to V03.09 fixed version: MB-Secure v12.53, MB-Secure PRO v03.09 CVE number:...
- SEC Consult SA-20250429-0 :: Multiple Vulnerabilities in HP Wolf Security Controller and more May 17, 2025Posted by SEC Consult Vulnerability Lab via Fulldisclosure on May 16SEC Consult Vulnerability Lab Security Advisory < publishing date 20250429-0 > Combined Security Advisory for Sure Access Enterprise and Sure Click Enterprise ======================================================================= title: Multiple Vulnerabilities product: HP Wolf Security Controller / HP Sure Access Enterprise / HP Sure Click Enterprise vulnerable version: HP Wolf […]
- SEC Consult SA-20250422-0:: Local Privilege Escalation via DLL Search Order Hijacking May 17, 2025Posted by SEC Consult Vulnerability Lab via Fulldisclosure on May 16SEC Consult Vulnerability Lab Security Advisory < 20250422-0 > ======================================================================= title: Local Privilege Escalation via DLL Search Order Hijacking product: Ivanti Endpoint Manager Security Scan (Vulscan) Self Update vulnerable version: EPM 2022 SU6 and previous, EPM 2024 fixed version: EPM 2022 SU7 and EPM 2024 […]
- Session Invalidation in Economizzer Allows Unauthorized Access After Logout May 17, 2025Posted by Ron E on May 16A session management vulnerability exists in gugoan's Economizzer v.0.9-beta1. The application fails to properly invalidate user sessions upon logout or other session termination events. As a result, a valid session remains active and usable even after the user has attempted to log out. POST /web/category/create HTTP/2 Host: Cookie: _economizzerSessionId=;
- Persistent Cross-Site Scripting in Economizzer Category Entry May 17, 2025Posted by Ron E on May 16A persistent cross-site scripting (XSS) vulnerability exists in gugoan's Economizzer v.0.9-beta1. The application fails to properly sanitize user-supplied input when creating a new category via the *category/create *endpoint. An attacker can inject malicious JavaScript payloads that are permanently stored and later executed in the context of any user who […]
- Persistent Cross-Site Scripting in Economizzer Cashbook Entry May 17, 2025Posted by Ron E on May 16A persistent cross-site scripting (XSS) vulnerability exists in gugoan's Economizzer v.0.9-beta1 The application fails to properly sanitize user-supplied input when creating a new cash book entry via the *cashbook/create* endpoint. An attacker can inject malicious JavaScript payloads that are permanently stored and later executed in the context of any […]
- APPLE-SA-05-12-2025-9 Safari 18.5 May 17, 2025Posted by Apple Product Security via Fulldisclosure on May 16APPLE-SA-05-12-2025-9 Safari 18.5 Safari 18.5 addresses the following issues. Information about the security content is also available at https://support.apple.com/122719. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. WebKit Available for: macOS Ventura and macOS Sonoma Impact: A type […]
- APPLE-SA-05-12-2025-8 visionOS 2.5 May 17, 2025Posted by Apple Product Security via Fulldisclosure on May 16APPLE-SA-05-12-2025-8 visionOS 2.5 visionOS 2.5 addresses the following issues. Information about the security content is also available at https://support.apple.com/122721. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleJPEG Available for: Apple Vision Pro Impact: Processing a maliciously crafted […]
Customers
Twitter FEED
Recent activity
-
SecureOnlineDesktop
Estimated reading time: 6 minutes L'impatto crescente delle minacce informatiche, su sistemi operativi privati op… https://t.co/FimxTS4o9G
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The growing impact of cyber threats, on private or corporate operating systems… https://t.co/y6G6RYA9n1
-
SecureOnlineDesktop
Tempo di lettura stimato: 6 minuti Today we are talking about the CTI update of our services. Data security is… https://t.co/YAZkn7iFqa
-
SecureOnlineDesktop
Estimated reading time: 6 minutes Il tema della sicurezza delle informazioni è di grande attualità in questo peri… https://t.co/tfve5Kzr09
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The issue of information security is very topical in this historical period ch… https://t.co/TP8gvdRcrF
Newsletter
{subscription_form_1}Products and Solutions
Partners
Cloud Models
News
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company May 6, 2024
- NIS: what it is and how it protects cybersecurity April 22, 2024
- Advanced persistent threats (APTs): what they are and how to defend yourself April 17, 2024
- Penetration Testing and MFA: A Dual Strategy to Maximize Security April 15, 2024
- Penetration Testing: Where to Strike to Protect Your IT Network March 25, 2024
Google Reviews
Ottima azienda, servizi molto utili, staff qualificato e competente. Raccomandata!read more
Ottimo supportoread more
E' un piacere poter collaborare con realtà di questo tiporead more
Un ottimo fornitore.
Io personalmente ho parlato con l' Ing. Venuti, valore aggiunto indubbiamente.read more
About
© 2024 Cyberfero s.r.l. All Rights Reserved. Sede Legale: via Statuto 3 - 42121 Reggio Emilia (RE) – PEC [email protected] Cod. fiscale e P.IVA 03058120357 – R.E.A. 356650 Informativa Privacy - Certificazioni ISO