Latest activity
-
JJ-Rod replied to the thread PBS ZFS disk speed thoughts option.Are you sure the user is @PBS and not @pam?
-
Nnyx` reacted to JensF's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
PVE 8 is EOL too. Even if it's not affected this time, Kernel vulnerabilities are found almost every week. It's just a matter of time. -
Nnyx` reacted to Neobin's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
So, you are: Running a OS that is EOL since two years Exposing it to the internet Disabling the firewall If this is not a troll, I hope the lesson was learned...
-
Nnyx` reacted to gurubert's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Sorry for your loss, but why would anyone do that?
-
Rrodrigonb reacted to kore's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
To be honest, I'm sick of this whole discussion. The newly registered users who were actually affected have already admitted that running an outdated system was a mistake. Meanwhile, some of the so-called veteran users on this forum just keep...
-
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.can you describe the code/details of the vulnerability?
-
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.cheers, valuable info
-
Ggasherbrum reacted to rodrigonb's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Well, if that makes any difference (I'm not a troll and have been registered for years): * I had a few bare metal customers with publicly accessible proxmox 7.2 URLs that were hacked; * Same message as these other users (ramsomware note) * No...
-
Rrodrigonb replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.That someone is the person who have set up the environment. Everyone manages their own environment as they see fit. The problem is that sometimes that person has no idea of what they are doing. Every once in a while a new vulnerability comes up...
-
GGilberto Ferreira reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
The usual use of the zero-day term is for vulnerabilities that are being exploited while there is no fix yet (for a supported/current version). That is something the administrator cannot do much about. This vulnerability is probably already fixed...
-
CCarlos Gomes reacted to rodrigonb's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Well, if that makes any difference (I'm not a troll and have been registered for years): * I had a few bare metal customers with publicly accessible proxmox 7.2 URLs that were hacked; * Same message as these other users (ramsomware note) * No...
-
CCarlos Gomes reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
Jjunglivre reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
This is both irresponsible and to be expected. Someone should warn then against doing this. This is helpful (for people running outdated versions). There have been several SSH vulnerabilities in the (internet) news. People should know better or...
-
CCarlos Gomes reacted to Sevy's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
I was hit with this same attack the night of the 28th luckily had backups i setup less than 24 hrs prior to happening. Seems they went around just scanning for vulnerable hosts exposed to the public. I had 2 hosts exposed to the public one 7.3-6...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Indeed it is, no issues until now, no weird things happening. Unfortunately, I couldn't get my hands on any infected environment to better understand what was the situation, what could be the failure points, etc. (all the environments I manage...
-
DDocop2 replied to the thread mpt2sas flooding dmesg.As with the flooding of the log.. Is there a way to make the system pause the error pumping ? Like if we get back after a week.. it will be uber clog for no reason.. Or maybe a service stop after x min of detection of an error ..?
-
Rrodrigonb replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Well, if that makes any difference (I'm not a troll and have been registered for years): * I had a few bare metal customers with publicly accessible proxmox 7.2 URLs that were hacked; * Same message as these other users (ramsomware note) * No...
-
Jjunglivre replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.To me, it doesn't even make sense we are commenting about Virtualizor and Hetzner on this thread, since the issue is that we may or may not have a security issue within old versions of Proxmox itself, and it isn't even slightly clear yet. Can we...
-
Jjunglivre reacted to janus57's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Hi, how can you be sure that there is a "unauthenticated RCE" touching PVE7/8 systems ? All the systems mentionned was affected by : https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-860952...
-
BBu66as replied to the thread OT: Debian erlaubt KI-Beiträge ohne Kennzeichnungspflicht.Der Lizenz-Punkt von @Johannes S ist eigentlich der spannendere, das Codestyle-Argument erledigt sich ja mit genug Nachdruck im Review. Beim DCO unterschreibst du nicht nur "ich steh dafür grade", sondern auch dass du das Recht hast, den Code...