Latest activity
-
CCarlos Gomes reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the... -
JJohannes S replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.I disagree. I think it's more toxic to have EOL systems (like PVE7) on the Internet. It makes the world for all a worse place. I also think it's toxic to register accounts to cry about about an "Proxmox security issue" which quite obviouvsly...
-
Ggfngfn256 reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the...
-
CCarlos Gomes reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Evidence? Evidence? Yet again, kore joined 8 minutes ago. So that proves you are unrelated! Please link.
-
CCarlos Gomes reacted to BobhWasatch's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
But that wasn't the only bug found in SSH over the last five years.
-
Ggfngfn256 replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Having read that post (& translating the Chinese!) & all comments, I believe it is a scam. Read it carefully. I don't think so. I've already stated above:
-
CCarlos Gomes reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
The usual use of the zero-day term is for vulnerabilities that are being exploited while there is no fix yet (for a supported/current version). That is something the administrator cannot do much about. This vulnerability is probably already fixed...
-
CCarlos Gomes reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Not sure what you mean by "Everything". So far you only reported your own single host being attacked. Are you (by chance) connected to arjitc, the other reporter of this attack. (Interestingly both these users only joined today, for the purpose...
-
CCarlos Gomes reacted to BobhWasatch's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Only to you, unless you are claiming that it affects an up-to-date version of PVE. PVE 7 is based on Debian 11, PVE 8 on Debian 12. So they would be affected by that bug unless they were updated since the bug was fixed.
-
CCarlos Gomes reacted to Gilberto Ferreira's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
In any case, I don't think this is a 0day vulnerability, because on this is happen due to out date servers and bad servers administration, to say the least. Many of this vulnerabilities are well-know documented, such as kernel and ssh...
-
JJohannes S reacted to BobhWasatch's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
But that wasn't the only bug found in SSH over the last five years.
-
JJohannes S reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Evidence? Evidence? Yet again, kore joined 8 minutes ago. So that proves you are unrelated! Please link.
-
Uurog replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.You're absolutely right...
-
JJohannes S reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
The usual use of the zero-day term is for vulnerabilities that are being exploited while there is no fix yet (for a supported/current version). That is something the administrator cannot do much about. This vulnerability is probably already fixed...
-
JJohannes S replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the...
-
Aarjitc replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Sure: https://www.nodeseek.com/post-900235-1 :)
-
Ggfngfn256 replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Evidence? Evidence? Yet again, kore joined 8 minutes ago. So that proves you are unrelated! Please link.
-
BBobhWasatch replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.But that wasn't the only bug found in SSH over the last five years.
-
Aarjitc replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.I'm unrelated to the other user, the only reason I signed up was after seeing the post on the other forum :) If I remember correctly at the time Debian 11 wasn't affected by that SSH bug EDIT: I found this and it seems like Debian 11 wasn't...
-
JJohannes S reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Not sure what you mean by "Everything". So far you only reported your own single host being attacked. Are you (by chance) connected to arjitc, the other reporter of this attack. (Interestingly both these users only joined today, for the purpose...