# OnetSolutions Blog

## Docs

- [A Sustainable and Eco-Responsible Vision](https://blog.onetsolutions.net/en/a-sustainable-and-eco-responsible-vision.md): How OnetSolutions promotes eco-responsibility through server recycling, component reuse, and donations to charitable programs.
- [AlmaLinux 9: Optimal Performance and Stability](https://blog.onetsolutions.net/en/almalinux-9-performance-and-stability.md): AlmaLinux 9, a 100% compatible alternative to CentOS, is now available on our VPS — bringing optimal performance, stability, and enhanced security.
- [The ARVE Backdoor (CVE-2026-18072): When the Supply Chain Is the Vulnerability](https://blog.onetsolutions.net/en/arve-backdoor-cve-2026-18072.md): A WordPress plugin with 20,000 installs shipped a hardcoded admin backdoor. What happened, how to check your sites, and what it changes about plugin trust.
- [Boost Your Site Speed by Up to 400% with LiteSpeed](https://blog.onetsolutions.net/en/boost-your-site-speed-by-400-percent.md): Our web hosting plans ship with LiteSpeed — an NGINX-based stack that can speed up your site (especially WordPress) by up to 400%.
- [The Benefits of Caching on a VPS](https://blog.onetsolutions.net/en/boost-your-website-with-vps-caching.md): How caching on a VPS speeds up page loads, lowers server load, saves bandwidth, and helps with SEO.
- [Who Will Succeed CentOS?](https://blog.onetsolutions.net/en/centos-successor-almalinux.md): With Red Hat moving CentOS to CentOS Stream, AlmaLinux has emerged as a serious alternative — now available on our VPS as a one-click install.
- [Copy Fail (CVE-2026-31431): Linux Kernel Local Privilege Escalation](https://blog.onetsolutions.net/en/copy-fail-cve-2026-31431.md): A critical Linux kernel cryptographic-subsystem flaw lets a local user become root. Analysis, scope, and mitigation.
- [cPanel, Plesk, or Webmin: Which Should You Pick?](https://blog.onetsolutions.net/en/cpanel-vs-plesk-vs-webmin.md): A side-by-side look at popular VPS control panels — cPanel, Plesk, Webmin, Virtualmin, and ISPConfig — to help you pick the right one.
- [CUPS: Remote Code Execution via cups-browsed (CVE-2024-47076 and friends)](https://blog.onetsolutions.net/en/cups-rce-2024.md): Four chained CUPS flaws let an attacker register a malicious printer and gain RCE when a user prints to it.
- [Debian 10](https://blog.onetsolutions.net/en/debian-10.md): Debian 10 Buster is now available for one-click install on our VPS, with AppArmor enabled by default for stronger access control.
- [Debian 11 Bullseye](https://blog.onetsolutions.net/en/debian-11-bullseye.md): Debian 11 Bullseye is now available for one-click install on our VPS at no extra cost — with kernel 5.10 LTS, native WireGuard, and exFAT support.
- [Debian 12 Bookworm](https://blog.onetsolutions.net/en/debian-12-bookworm.md): Debian 12 is now available on our VPS — bringing the Linux 5.10 kernel, stronger security with AppArmor and seccomp, and an improved apt experience.
- [Debian 13 Trixie: New Features and Improvements](https://blog.onetsolutions.net/en/debian-13-trixie.md): Debian 13 'Trixie' is now available as a one-click install on our VPS — with kernel 6.12 LTS, GNOME 48, KDE Plasma 6.3, and 14,100 new packages.
- [Hardening a Linux VPS: Tips and Tools](https://blog.onetsolutions.net/en/enhanced-vps-linux-security.md): Practical tips and recommended tools — iptables, SSH keys, Fail2ban, OpenVAS, Logwatch, ModSecurity — to harden your Linux VPS.
- [Get a Domain Name for Free](https://blog.onetsolutions.net/en/free-domain-name.md): A well-chosen domain name strengthens your online presence and SEO. ONETSOLUTIONS includes a free domain name with every web hosting plan.
- [How to Get a Free SSL Certificate](https://blog.onetsolutions.net/en/free-ssl-certificate-for-web-hosting.md): Our entire shared hosting infrastructure now serves HTTPS, with a free SSL certificate compatible with most browsers.
- [GhostLock (CVE-2026-43499): Fifteen Years of Kernel, Root in Five Seconds](https://blog.onetsolutions.net/en/ghostlock-cve-2026-43499.md): A use-after-free in the kernel futex priority-inheritance path turns any local user into root and escapes containers. No workaround — only a reboot.
- [How cPanel Simplifies Hosting Management](https://blog.onetsolutions.net/en/how-cpanel-makes-life-easier.md): A look at cPanel — included for free in our web hosting plans starting at €1.90 — and everything you can manage with it in just a few clicks.
- [Ingress Nightmare: Unauthenticated RCE on Kubernetes Clusters (Ingress NGINX)](https://blog.onetsolutions.net/en/ingress-nightmare-kubernetes-2025.md): Four chained CVEs in the Ingress NGINX controller let an unauthenticated attacker run code and ultimately take over the cluster.
- [Windows Licensing Now Available](https://blog.onetsolutions.net/en/licensed-windows-vps-now-available.md): Windows licences are now available on our VPS — unlimited users, no commitment, and €1.80 excl. VAT per month per vCPU.
- [Web Analytics with Matomo](https://blog.onetsolutions.net/en/matomo-statistics-for-web-hosting.md): Track visitor activity on your blog, store, forum or website with Matomo — included with our web hosting plans.
- [MongoBleed (CVE-2025-14847): Unauthenticated MongoDB Memory Leak](https://blog.onetsolutions.net/en/mongobleed-cve-2025-14847.md): A flaw in MongoDB's network layer leaks fragments of server RAM — credentials, API keys, BSON — to unauthenticated attackers.
- [New VPS Plans](https://blog.onetsolutions.net/en/new-vps-plans.md): A new VPS lineup with DDR4 memory and Intel E5-2690v3 CPUs — up to 500% faster on CPU and 50% faster on RAM compared to our previous plans.
- [On-Demand NVIDIA GPU, Billed by the Minute](https://blog.onetsolutions.net/en/nvidia-gpu-on-demand.md): Attach an NVIDIA L4 GPU to your High Performance VPS in one click, train or serve your models, then detach it — you only pay for the minutes used.
- [Install WordPress, PrestaShop or Drupal in Two Clicks](https://blog.onetsolutions.net/en/one-click-install-wordpress-prestashop-drupal.md): Install WordPress, Drupal, PrestaShop and many other CMS in two clicks with Installatron — included for free in our web hosting plans.
- [Blog](https://blog.onetsolutions.net/en/overview.md): News, announcements, and guides from the OnetSolutions team
- [Pay with Bitcoin and Altcoins](https://blog.onetsolutions.net/en/pay-with-bitcoin-and-altcoins.md): ONETSOLUTIONS is one of the first hosting providers to accept Bitcoin and altcoin payments to make ordering and renewing your services easier.
- [Pay with Paysafecard](https://blog.onetsolutions.net/en/pay-with-paysafecard.md): Pay for your hosting, domain name, web radio or VPS with a PAYSAFECARD prepaid card — now accepted at ONETSOLUTIONS.
- [React2Shell (CVE-2025-55182): Unauthenticated RCE in React Server Components](https://blog.onetsolutions.net/en/react2shell-cve-2025-55182.md): Unsafe deserialisation in React 19's Flight protocol allows arbitrary code execution on the server. CVSS 10.0, active exploitation.
- [RediShell (CVE-2025-49844): Redis Lua Sandbox Escape to RCE](https://blog.onetsolutions.net/en/redishell-cve-2025-49844.md): A malicious Lua script exploits a use-after-free in Redis's embedded engine to execute native code on the host. Public PoC.
- [RegreSSHion (CVE-2024-6387): Unauthenticated RCE in OpenSSH](https://blog.onetsolutions.net/en/regresshion-cve-2024-6387.md): A regression of a 2006 OpenSSH bug reappears in recent versions and allows remote code execution as root, without authentication.
- [Hardening WordPress After wp2shell: Seven Measures That Actually Matter](https://blog.onetsolutions.net/en/secure-wordpress-after-wp2shell.md): Two critical WordPress incidents in a fortnight, from opposite directions. A practical checklist: auto-updates, plugin hygiene, least privilege, and compromise checks.
- [Protect Your Data with Automated Backups](https://blog.onetsolutions.net/en/secure-your-data-with-automated-backups.md): Two backup options to protect your data: automated daily backups (€4.99/mo) and on-demand snapshots (€2.99/mo) — encrypted, off-site, and flexible.
- [How Server Location Impacts Website Performance](https://blog.onetsolutions.net/en/server-location-and-website-performance.md): Why server location matters for performance, availability, and SEO — and how to pick the right one for your website.
- [Simplified Automation with Ansible](https://blog.onetsolutions.net/en/simplified-automation-with-ansible.md): What Ansible is, how it works, and how its agentless, YAML-based approach can simplify deployment and configuration management.
- [Ubuntu 18.04 LTS](https://blog.onetsolutions.net/en/ubuntu-18-04-lts.md): Ubuntu 18.04 LTS is now available for one-click install on our VPS.
- [Ubuntu 24.04 Noble Numbat: New Features and Improvements](https://blog.onetsolutions.net/en/ubuntu-24-04.md): Ubuntu 24.04 LTS 'Noble Numbat' is now available on our VPS — featuring GNOME 46, Linux 6.8, an updated installer, and more.
- [Why Small Businesses Should Choose VPS Hosting](https://blog.onetsolutions.net/en/vps-hosting-for-small-businesses.md): Why VPS hosting often is the right fit for small businesses — flexibility, performance, control, security, and expert support.
- [An Upgrade for Our VPS Plans](https://blog.onetsolutions.net/en/vps-plan-upgrade.md): Our refreshed VPS pricing is live: more NVMe storage, harmonised SSD storage, and updated options for backups, snapshots and managed services.
- [Windows Server 2019](https://blog.onetsolutions.net/en/windows-server-2019.md): Windows Server 2019 is now available for one-click install on our VPS.
- [Windows Server 2025 Now Available](https://blog.onetsolutions.net/en/windows-server-2025.md): Deploy your instances on Windows Server 2025 with the licence included in the price — connect via RDP and get to work in minutes.
- [wp2shell (CVE-2026-63030): Unauthenticated Remote Code Execution in WordPress Core](https://blog.onetsolutions.net/en/wp2shell-cve-2026-63030.md): A batch-API routing flaw chained with an SQL injection gives full site takeover without credentials. Patched in 6.9.5 and 7.0.2, and exploited in the wild.
- [xz-utils Backdoor (CVE-2024-3094): A Textbook Supply-Chain Attack](https://blog.onetsolutions.net/en/xz-backdoor-cve-2024-3094.md): A deliberate backdoor planted in xz-utils 5.6.0 and 5.6.1 targeted OpenSSH via systemd. Caught early, narrow blast radius — but the lesson is huge.
- [YunoHost: Easy and Secure Self-Hosting](https://blog.onetsolutions.net/en/yunohost-easy-and-secure-self-hosting.md): YunoHost on Debian 11 is now available as a one-click install on our VPS — making it simple to self-host your online services.