Latest activity
-
Rrodrigonb replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.That someone is the person who have set up the environment. Everyone manages their own environment as they see fit. The problem is that sometimes that person has no idea of what they are doing. Every once in a while a new vulnerability comes up...
-
GGilberto Ferreira reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
The usual use of the zero-day term is for vulnerabilities that are being exploited while there is no fix yet (for a supported/current version). That is something the administrator cannot do much about. This vulnerability is probably already fixed... -
CCarlos Gomes reacted to rodrigonb's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Well, if that makes any difference (I'm not a troll and have been registered for years): * I had a few bare metal customers with publicly accessible proxmox 7.2 URLs that were hacked; * Same message as these other users (ramsomware note) * No...
-
CCarlos Gomes reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
Jjunglivre reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
This is both irresponsible and to be expected. Someone should warn then against doing this. This is helpful (for people running outdated versions). There have been several SSH vulnerabilities in the (internet) news. People should know better or...
-
CCarlos Gomes reacted to Sevy's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I was hit with this same attack the night of the 28th luckily had backups i setup less than 24 hrs prior to happening. Seems they went around just scanning for vulnerable hosts exposed to the public. I had 2 hosts exposed to the public one 7.3-6...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Indeed it is, no issues until now, no weird things happening. Unfortunately, I couldn't get my hands on any infected environment to better understand what was the situation, what could be the failure points, etc. (all the environments I manage...
-
DDocop2 replied to the thread mpt2sas flooding dmesg.As with the flooding of the log.. Is there a way to make the system pause the error pumping ? Like if we get back after a week.. it will be uber clog for no reason.. Or maybe a service stop after x min of detection of an error ..?
-
Rrodrigonb replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Well, if that makes any difference (I'm not a troll and have been registered for years): * I had a few bare metal customers with publicly accessible proxmox 7.2 URLs that were hacked; * Same message as these other users (ramsomware note) * No...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.To me, it doesn't even make sense we are commenting about Virtualizor and Hetzner on this thread, since the issue is that we may or may not have a security issue within old versions of Proxmox itself, and it isn't even slightly clear yet. Can we...
-
Jjunglivre reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
BBu66as replied to the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht.Der Lizenz-Punkt von @Johannes S ist eigentlich der spannendere, das Codestyle-Argument erledigt sich ja mit genug Nachdruck im Review. Beim DCO unterschreibst du nicht nur "ich steh dafür grade", sondern auch dass du das Recht hast, den Code...
-
SSevy replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Virtualizor does have issues currently but this was not related to that as my system was not attached to it. Our PVE 8.1 install didnt get hit by this only 7.3-11. Wish I had more logs to share but had to wipe the machine quickly and get it...
-
JJohannes S reacted to janus57's post in the thread Forum thread with a message saying “Proxmox is compromised” with Like.
Hi, the "true" news to stop speculating : https://www.virtualizor.com/blog/security-incident-bgp-hijacking/ And the post never mention proxmox as "hacked or compromised"… Best regards,
-
JJohannes S reacted to leesteken's post in the thread Forum thread with a message saying “Proxmox is compromised” with Like.
Earlier, when the OP posted, the only mention was "Can confirm we're not using Proxmox", "i'm more aware of the proxmox one, anyone's having any information?", "it's also a weak product so not an extremely big revenue like vmWare, Hyper-V or even...
-
JJohannes S reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
JJohannes S reacted to Sevy's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I was hit with this same attack the night of the 28th luckily had backups i setup less than 24 hrs prior to happening. Seems they went around just scanning for vulnerable hosts exposed to the public. I had 2 hosts exposed to the public one 7.3-6...
-
Jjanus57 replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
SSevy replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.I was hit with this same attack the night of the 28th luckily had backups i setup less than 24 hrs prior to happening. Seems they went around just scanning for vulnerable hosts exposed to the public. I had 2 hosts exposed to the public one 7.3-6...
-
JJohannes S reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, What are you talking about ? Neither hetzner was breached and/or proxmox host in hetzner network was affected by the BGP Hijack. The big problem that "virtualizor" has is that "[...]product update clients did not yet cryptographically...