Recent Posts
21
CentOS-WebPanel Bugs / Re: NodeJS Manager show apps in stopped state even they're running
« Last post by adrianofnatal on October 15, 2026, 02:40:04 AM »Hi!
They reply me the same as replied to you.
Told them that was caused after update to 1.19 too.
Its a bug, of course.
They reply me the same as replied to you.
Told them that was caused after update to 1.19 too.
Its a bug, of course.
22
Information / Re: New security issue? 09.09.2026
« Last post by adrianofnatal on October 15, 2026, 12:52:09 AM »Hi!
Search your servers for file below:
/usr/local/cwpsrv/var/services/api/v1/deploy-all.sh
Its a entry point for a GSocket. Comes from some version of CWP.
Found on my server in lastest version, 1.19.
Search your servers for file below:
/usr/local/cwpsrv/var/services/api/v1/deploy-all.sh
Its a entry point for a GSocket. Comes from some version of CWP.
Found on my server in lastest version, 1.19.
23
Information / Re: Possible CWP Security Issue – Malicious JavaScript Injection
« Last post by adrianofnatal on October 15, 2026, 12:43:13 AM »Hi all.
GSocket come back in one of my servers.
I found this file in /usr/local/cwpsrv/var/services/api/v1
-rw-r--r-- 1 root root 16458015 Oct 5 08:09 deploy-all.sh
[root@srv04 v1]# stat deploy-all.sh
File: deploy-all.sh
Size: 16458015 Blocks: 32152 IO Block: 4096 regular file
Device: fd00h/64768d Inode: 409139 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2026-10-14 21:36:51.313172533 -0300
Modify: 2026-10-05 08:09:09.314262697 -0300
Change: 2026-10-05 08:09:09.314262697 -0300
Birth: 2026-10-05 08:09:09.284261891 -0300
Check yours!
GSocket come back in one of my servers.
I found this file in /usr/local/cwpsrv/var/services/api/v1
-rw-r--r-- 1 root root 16458015 Oct 5 08:09 deploy-all.sh
[root@srv04 v1]# stat deploy-all.sh
File: deploy-all.sh
Size: 16458015 Blocks: 32152 IO Block: 4096 regular file
Device: fd00h/64768d Inode: 409139 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2026-10-14 21:36:51.313172533 -0300
Modify: 2026-10-05 08:09:09.314262697 -0300
Change: 2026-10-05 08:09:09.314262697 -0300
Birth: 2026-10-05 08:09:09.284261891 -0300
Check yours!
24
CentOS-WebPanel Bugs / Re: NodeJS Manager show apps in stopped state even they're running
« Last post by 6Sense on October 14, 2026, 11:15:32 PM »Hi Mate,
Same issue here. I've sent a ticket to CWP yesterday (#673168) but initial response is (you are not a paid support customer etc). Currently trying to get them to realise it is a CWP node.js manager bug caused by 1.19 that can be replicated & needs to be passed to the developers. Thus far no further progress with them. Hopefully the developers will notice this post.
Issue: All Apps show as stopped. Clicking the start application button gives error 'Application can not start' & beware do not click the NPM Install button, it will unseat all node packages & the server will go nuclear trying to repeatedly restart the app but be unable to find the files it requires.
Currently it repeatedly spawns the below error every few seconds. I'm managing apps via terminal as a workaround.
===== CWP STATUS CHECK ERRORS =====
[root@srv /]# tail -15 /usr/local/cwpsrv/logs/error_log
2026/10/14 12:28:29 [error] 922#0: *2 FastCGI sent in stderr: "PHP message: PHP Warning: property_exists() expects exactly 2 parameters, 1 given in /usr/local/cwpsrv/htdocs/resources/admin/include/modules/nodejs/traits/NodeJSMainTrait.php on line 0" while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: localhost, request: "POST /cwp_f3b3ae57a94020767cf02d9c618c6716/admin/loader_ajax.php?ajax=nodejs&acc=status_listener HTTP/1.1", upstream: "fastcgi://unix:/usr/local/cwp/php71/var/sockets/cwpsrv.sock:", host: "srv.myhost.com.au:2087", referrer: "https://srv.myhost.com.au:2087/cwp_f3b3ae57a94020767cf02d9c618c6716/admin/index.php?module=mod_nodejs"
This file is obfuscated so I cannot progress.
Same issue here. I've sent a ticket to CWP yesterday (#673168) but initial response is (you are not a paid support customer etc). Currently trying to get them to realise it is a CWP node.js manager bug caused by 1.19 that can be replicated & needs to be passed to the developers. Thus far no further progress with them. Hopefully the developers will notice this post.
Issue: All Apps show as stopped. Clicking the start application button gives error 'Application can not start' & beware do not click the NPM Install button, it will unseat all node packages & the server will go nuclear trying to repeatedly restart the app but be unable to find the files it requires.
Currently it repeatedly spawns the below error every few seconds. I'm managing apps via terminal as a workaround.
===== CWP STATUS CHECK ERRORS =====
[root@srv /]# tail -15 /usr/local/cwpsrv/logs/error_log
2026/10/14 12:28:29 [error] 922#0: *2 FastCGI sent in stderr: "PHP message: PHP Warning: property_exists() expects exactly 2 parameters, 1 given in /usr/local/cwpsrv/htdocs/resources/admin/include/modules/nodejs/traits/NodeJSMainTrait.php on line 0" while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: localhost, request: "POST /cwp_f3b3ae57a94020767cf02d9c618c6716/admin/loader_ajax.php?ajax=nodejs&acc=status_listener HTTP/1.1", upstream: "fastcgi://unix:/usr/local/cwp/php71/var/sockets/cwpsrv.sock:", host: "srv.myhost.com.au:2087", referrer: "https://srv.myhost.com.au:2087/cwp_f3b3ae57a94020767cf02d9c618c6716/admin/index.php?module=mod_nodejs"
This file is obfuscated so I cannot progress.
25
Backup / Re: Backup Manager Beta is not remembering password in destination
« Last post by Martins-phpbb on October 14, 2026, 10:53:04 PM »1.19 just ran a back up to a nas via ftp it seems to be working so far.
26
CentOS-WebPanel Bugs / NodeJS Manager show apps in stopped state even they're running
« Last post by adrianofnatal on October 14, 2026, 10:49:33 PM »Hi all!
After update to 1.19, the NodeJS Manager show apps in stopped state even they're running.
If kill app in shell and start in panel button, the app runs, but still showing in stopped state.
How to solve this issue?
It's critical to us.
Thanks
After update to 1.19, the NodeJS Manager show apps in stopped state even they're running.
If kill app in shell and start in panel button, the app runs, but still showing in stopped state.
How to solve this issue?
It's critical to us.
Thanks
27
Information / Re: myurl/phpmyadmin fowards to my real ip with phpmyadmin login screen.
« Last post by tg040 on October 14, 2026, 10:37:37 PM »works thanks.
28
Information / Re: myurl/phpmyadmin fowards to my real ip with phpmyadmin login screen.
« Last post by overseer on October 14, 2026, 09:44:09 PM »Look under WebServer Settings > Apache Redirects. You can get rid of some redirects there.
Or WebServer Settings >WebServers Template Editor > httpd > Clone "default.tpl" and remove the various pma redirect lines that concern you.
Or WebServer Settings >WebServers Template Editor > httpd > Clone "default.tpl" and remove the various pma redirect lines that concern you.
29
Information / myurl/phpmyadmin fowards to my real ip with phpmyadmin login screen.
« Last post by tg040 on October 14, 2026, 08:45:24 PM »Hello,
Can someone tell me how to prevent cwp from forwarding requests from https://mysite.com/pwa or https://mysite.com/phpmyadmin to my server ip such as http:123.132.123.123:2031/pma that gives access to anyone to my phpmyadmin login screen?
I know this is probably meant to make it easier for users, but it's a security hole since hackers can brute force indefinitely there. There is no block on failed login attempts.
Can someone tell me how to prevent cwp from forwarding requests from https://mysite.com/pwa or https://mysite.com/phpmyadmin to my server ip such as http:123.132.123.123:2031/pma that gives access to anyone to my phpmyadmin login screen?
I know this is probably meant to make it easier for users, but it's a security hole since hackers can brute force indefinitely there. There is no block on failed login attempts.
30
Nginx / Re: NGINX has 6 more CVE's today
« Last post by overseer on October 14, 2026, 07:00:25 PM »Man, I'm going on vacation. Oh wait, I tried that and hackers ran amuck on my server. Guess not -- the ostrich technique doesn't work so well.
