Recent Posts
21
CentOS-WebPanel Bugs / Re: Test page centos hijack my facebook...
« Last post by overseer on July 21, 2026, 06:18:26 PM »Also, you can change your Index directive in Apache or Nginx. I always set it to just index.php (removing index.html and index.htm) unless it is for a static HTML site (much more rarely these days).
22
CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's
« Last post by overseer on July 21, 2026, 06:15:35 PM »The main thread regarding the gsocket hacking should have most of the details you need. Also the CWP-provided script should do a lot for you automatically. Do you need help cleaning up your server?
23
CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's
« Last post by xenios on July 21, 2026, 04:19:56 PM »Hacker used CWP to get into server, not centos.
Not to mention that centos 8 is one of the OS that CWP recommends.
Anyhow, CWP was patched but hacker was already in.
Any suggestions on how to clean server?
Not to mention that centos 8 is one of the OS that CWP recommends.
Anyhow, CWP was patched but hacker was already in.
Any suggestions on how to clean server?
24
Other / Forum's down for a long time
« Last post by Starburst on July 21, 2026, 02:24:07 PM »I'm sure I'm not the only one who noticed the long downtime of the forums this latest time.
We have created CWP forums, as well as others at: https://sysadmin.help
No, we are NOT CWP. Only a Licensing Partner.
Right now, it's only a couple of us on there.
But hopefully it can grow and become an additional resource for all.
We have created CWP forums, as well as others at: https://sysadmin.help
No, we are NOT CWP. Only a Licensing Partner.
Right now, it's only a couple of us on there.
But hopefully it can grow and become an additional resource for all.
25
CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's
« Last post by Starburst on July 21, 2026, 02:19:10 PM »Any reason you're running an EOL OS (CentOS Linux release 8.5.2111)?
That OS isn't receiving any updates, and hasn't for a long while.
It reached EOL on December 31, 2021.
Stream 'replaced' it and then became Red Hat's beta OS.
Fedora (alpha) -> CentOS Stream (beta) -> Red Hat Enterprise (RHEL).
CentOS Stream 8 is no longer supported either.
It officially reached its End of Life (EOL) and End of Support (EOS) on May 31, 2024.
Neither receives security updates, bug fixes, or new package builds.
Running that OS is just asking for hackers.
CWP has fixed it on there end, but that EOL still has the vulnerabilities hackers can use.
That OS isn't receiving any updates, and hasn't for a long while.
It reached EOL on December 31, 2021.
Stream 'replaced' it and then became Red Hat's beta OS.
Fedora (alpha) -> CentOS Stream (beta) -> Red Hat Enterprise (RHEL).
CentOS Stream 8 is no longer supported either.
It officially reached its End of Life (EOL) and End of Support (EOS) on May 31, 2024.
Neither receives security updates, bug fixes, or new package builds.
Running that OS is just asking for hackers.
CWP has fixed it on there end, but that EOL still has the vulnerabilities hackers can use.
26
CentOS-WebPanel Bugs / Re: CVE-2025-48703 + CVE-2026-57517: the gsocket systemd backdoor CWP's
« Last post by xenios on July 21, 2026, 09:16:30 AM »I facing the same problem. Hacker have injected code in system files that make pages show different content to different users.
Found these entries in /etc/hosts
127.0.0.1 mya.cloudsyndication.org
127.0.0.1 gsocket.io
127.0.0.1 www.gsocket.io
and removed them. I restarted apache but nothing changed.
What else has to be done in order to remove all malicious code/files from server.
Running CWP vesrion 0.9.8.1244 on CentOS Linux release 8.5.2111
Thank you
Found these entries in /etc/hosts
127.0.0.1 mya.cloudsyndication.org
127.0.0.1 gsocket.io
127.0.0.1 www.gsocket.io
and removed them. I restarted apache but nothing changed.
What else has to be done in order to remove all malicious code/files from server.
Running CWP vesrion 0.9.8.1244 on CentOS Linux release 8.5.2111
Thank you
27
CentOS-WebPanel Bugs / Re: Test page centos hijack my facebook...
« Last post by Logician on July 20, 2026, 05:53:39 AM »Removing index.html from /public_html/ MIGHT help.
28
Softaculous / Real girls from your postcode
« Last post by jeffvv on July 20, 2026, 05:30:21 AM »Meet a girl who'll make you feel alive - No Selfie
https://GirlSingle.com
She's waiting for your text
NEW GIRLS
Kayden Kross
Pepe Coco
Katya Sun
Eva LustFul
Anika Uwunikaa
Krissy Lynn
Jada Stevens
Bella Rose
Alexa
Taylor
Bella
Hazel Moore
Hime Marie
https://GirlSingle.com
She's waiting for your text
NEW GIRLS
Kayden Kross
Pepe Coco
Katya Sun
Eva LustFul
Anika Uwunikaa
Krissy Lynn
Jada Stevens
Bella Rose
Alexa
Taylor
Bella
Hazel Moore
Hime Marie
29
CentOS-WebPanel Bugs / Re: Test page centos hijack my facebook...
« Last post by geodim on July 16, 2026, 10:24:10 PM »Did you ever find a solution? I am facing the same problem!
30
Backup / Re: NEW Backup: Still in Perpetual Beta? Critical Issues Unresolved for Months (CWP7
« Last post by Xweb on July 16, 2026, 02:17:24 AM »I appreciate your reply, and unfortunately it seems I'm not the only one experiencing long response times from support.
For me, however, the main concern is not just the lack of replies to tickets. It is the current state of the NEW Backup module itself.
After previous forced updates, both local and remote backups were broken for quite some time. Thankfully those issues were eventually fixed, but only after many reports and a long wait.
The remaining issue is, in my opinion, just as important: backup notification emails are still unreliable. Most of the time they are not sent at all, and when they are, they contain almost no useful information. They do not specify whether the notification refers to a local or remote backup, which accounts were successfully backed up, whether any account failed, or if the backup completed with warnings or errors.
This affects both local and remote backups.
A professional backup solution should provide administrators with enough information to immediately verify the outcome of scheduled backup jobs. Instead, I still have to manually log into the server and check every backup to make sure everything completed successfully. That defeats one of the main purposes of having automated backup notifications.
What concerns me even more is that this issue has remained unresolved for months, despite being reported through official support tickets, while the forum has also received no response from the development team.
I am not posting this to criticize anyone personally. I simply hope the developers acknowledge this issue, provide some feedback, and let the community know whether it is already being worked on and when we can reasonably expect a fix.
CWP7 PRO
For me, however, the main concern is not just the lack of replies to tickets. It is the current state of the NEW Backup module itself.
After previous forced updates, both local and remote backups were broken for quite some time. Thankfully those issues were eventually fixed, but only after many reports and a long wait.
The remaining issue is, in my opinion, just as important: backup notification emails are still unreliable. Most of the time they are not sent at all, and when they are, they contain almost no useful information. They do not specify whether the notification refers to a local or remote backup, which accounts were successfully backed up, whether any account failed, or if the backup completed with warnings or errors.
This affects both local and remote backups.
A professional backup solution should provide administrators with enough information to immediately verify the outcome of scheduled backup jobs. Instead, I still have to manually log into the server and check every backup to make sure everything completed successfully. That defeats one of the main purposes of having automated backup notifications.
What concerns me even more is that this issue has remained unresolved for months, despite being reported through official support tickets, while the forum has also received no response from the development team.
I am not posting this to criticize anyone personally. I simply hope the developers acknowledge this issue, provide some feedback, and let the community know whether it is already being worked on and when we can reasonably expect a fix.
CWP7 PRO
