xtream ui security issues

[max89]

hello, they are modifying the administrator password, I already changed the ssh password and added google captcha at login, but they keep changing the administrator password, it is not only happening to me but also to a partner, I have version donator 22b, any solution
nobody has access to the panel except me, I don't know what to do where they will enter and change the password.

 

[urgodfather]

Solution is simple, do not expect security to come with click of mouse. Need to practice basic security principles that apparently 95% of you don’t.

 

[memmo]

i have same problem my admin pass change now canhelp me to enable security

 

[cetipabo]

why not reporting that issue to xtrem ui team ??

 

[lasauce29]

same thing for me this morning admin password was changed..

 

[penfolduk]

dont use admin as login ....simples

set up server then make new user with admin access login with it then delete admin login

 

[bandookk]

Same Problem With Me Today My Admin Password Not Work...

 

[rob2k9]

Solution is simple, do not expect security to come with click of mouse. Need to practice basic security principles that apparently 95% of you don’t.

i think someone should make a little tutorial on how to change it to make it a little more secure for numpties but again i do think xtreamui could do more i mean rate limiting logins and api requests for the same ip address should come as standard to avoid brute forcing and ddos

but again i bet these people didnt even check there pc to see if they have a keylogger lol could be changing passwords all the time just for the person to get it again now that would be funny

 

[Euro-iptv]

Stop using direct port for Admin panel, use a path for login page.. change username Admin to any other name.

 

[esolks]

hello guys
things to do to secure your server :
1 . secure your sql server ----- learn how To secure sql server ..allow and denny acces betwen main and LBs by iptable rouls ,change port and passwd...
2. secure the acces to your admin panel port by unique dns or ip .
3. secure your ubuntu server by UFW.
4. hide your main server behind a proxy.

and

5. google is your friend...don't ask me anythings to help you to secure your server's hole. be a man and close it yourself

good luck to nubes

 

[baja92]

i have same problem my admin pasword dont work

 

[akawi11]

any updates about this hacks?!!

 

[baja92]

any updates about this hacks?!!

R21

 

[akawi11]

R21

what you mean
R21 is can be hacked
or R22 last version?