Latest activity
-
Ggfngfn256 reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
You're just too late for Proxmox to spend time and money on this. PVE 8.4.21 is just about EoL and out of support (and it did get several updates beyond 8.4.0). PVE 9 did get a lot of CVE fixes via the Linux kernel and Debian recently that might... -
Ggfngfn256 reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I disagree. I think it's more toxic to have EOL systems (like PVE7) on the Internet. It makes the world for all a worse place. I also think it's toxic to register accounts to cry about about an "Proxmox security issue" which quite obviouvsly...
-
Jjanus57 replied to the thread Forum thread with a message saying “Proxmox is compromised”.Hi, the "true" news to stop speculating : https://www.virtualizor.com/blog/security-incident-bgp-hijacking/ And the post never mention proxmox as "hacked or compromised"… Best regards,
-
Jjanus57 replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Hi, hum 8.4 was out on the 9 april 2025, so it's affected by all the PSA (which affect PVE8) after this post : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/#post-764654 Which on recent PSA allows an...
-
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Were compromised hosts here using Virtualizor API/SSH connection? https://forum.proxmox.com/threads/forum-thread-with-a-message-saying-%E2%80%9Cproxmox-is-compromised%E2%80%9D.186086/
-
JJohannes S reacted to Carlos Gomes's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Could be a coincidence, or related to the fact that we have a sh**tload of occurrences in Brasil because of outdated version and bad sysadmins on small providers, that rely exclusively on next next finish installations and the mindset of using...
-
JJohannes S reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
You're just too late for Proxmox to spend time and money on this. PVE 8.4.21 is just about EoL and out of support (and it did get several updates beyond 8.4.0). PVE 9 did get a lot of CVE fixes via the Linux kernel and Debian recently that might...
-
BBobhWasatch reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I disagree. I think it's more toxic to have EOL systems (like PVE7) on the Internet. It makes the world for all a worse place. I also think it's toxic to register accounts to cry about about an "Proxmox security issue" which quite obviouvsly...
-
Uurog replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.You're absolutely right, and I accept the failure on my side. Just to clarify, this is informational, not a complaint. I'm sharing it so you're aware that this actually happened in our environment and can take it into account.
-
Iikrsdo posted the thread (open source) PMG Quarantine Admin - mobile-first admin console for PMG (quarantine, tracking center, dashboard) + live demo in Mail Gateway: Installation and configuration.Hello PMG Admins, I've been running PMG for a while, and the one thing that always bugged me was managing the spam quarantine from my phone. The admin interface works fine, but it's not built for a small screen - and there are days I need to...
-
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.regardless of if its out of support or not, it will be interesting to know the method for the breach
-
Jjunglivre reacted to Carlos Gomes's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Could be a coincidence, or related to the fact that we have a sh**tload of occurrences in Brasil because of outdated version and bad sysadmins on small providers, that rely exclusively on next next finish installations and the mindset of using...
-
CCarlos Gomes replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Could be a coincidence, or related to the fact that we have a sh**tload of occurrences in Brasil because of outdated version and bad sysadmins on small providers, that rely exclusively on next next finish installations and the mindset of using...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Unfortunately, the report I received was out of my hand. Isn't from any of my customers/colleagues, don't have access to the environment, and also don't know how they got in. Just telling that I saw a 8.4.0 getting owned.
-
-
CCarlos Gomes reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I disagree. I think it's more toxic to have EOL systems (like PVE7) on the Internet. It makes the world for all a worse place. I also think it's toxic to register accounts to cry about about an "Proxmox security issue" which quite obviouvsly...
-
CCarlos Gomes reacted to gfngfn256's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Having read that post (& translating the Chinese!) & all comments, I believe it is a scam. Read it carefully. I don't think so. I've already stated above:
-
BBobhWasatch reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Systems without current system updates can be hacked, nothing is "new" or "urgent" on this. And PVE7 and PVE8 won't get any security updates any more so it's somehow expected that they get owned. Even if you don't connect them directly to the...
-
AAkUsP replied to the thread PBS ZFS disk speed thoughts option.The PBS is added as trusted storage on the PVE cluster. When i run the command with :8007 i says "error" cant find path. When I remove the :8007, it asks for the password, as if the PBS user was not added on the PVE cluster. I then enter the...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Got reports till 8.4.0
-
Aarjitc replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.I still think a more productive way to look at this would be to see if there's any possible/remaining logs, to see what could've exactly caused this, and then list exact affected versions? So far reading between the posts here and the other...
