In case you have not already heard, SolusVM has a pretty big vulnerability. A few providers have been affected. I urge all providers to immediately address this. More info here.
Latest posts by Liam (see all)
- How To Create a DNS Server On Ubuntu 18.04 - July 10, 2019
- How To Create a DNS Server On Debian Stretch - June 27, 2019
- How To Install and Use A Plex Media Server On Raspbian Stretch - June 17, 2019
As a client, what should we do?? Wait for the provider to say its ‘fixed’, then reinstall our vps *and* change our password into solusvm?
Anything else?
Most providers are back up.
More info:
http://lowendtalk.com/discussion/11187/solusvm-vulnerability#latest
http://lowendtalk.com/discussion/11191/ramnode-is-down#latest
Seriously? Did the developer(s) _JUST_ learn PHP or something? That’s such a joke.
As I told many times before to many people: solus is awful and even kids could do it better security wise
$xc = $db -> query('SELECT * FROM centralbackup WHERE id = \'' . $_POST['deleteid'] . '\'', true);Query to database directly from the POST ? It’s not even sanitized (not to mention PDO and bind parameters…). This software is supposed to be the “industry standard” …
Wait till you see the login vuln and admin panel vuln. Ill release those later :)
Anyone using SolusVM after today deserves all they get. To all providers: I urge you to ditch it.
It’s all about best on the market. This is SolusVM for now. Until it changes, we have to stick with it. Every software has its fair share of issues and exploits. At least Solus reacted.
Attention providers:
In roughly 12 hours I will be disclosing 3 zero day vulnerabilities on solusvm.
I suggest you take backups fast or else hackers will abuse this. I have tried contacting solusvm to fix it however I have been ignored.
They stated the vuln is “not important at this time”
Good luck.
Could you possibly wait for like 20 hours that way I can be awake?
Thanks!
Share the links, haha
SolusVM seems to jump when issues arise so unsure how they would ignore any creditable threat.
Esp considering your name is lol, I assume its a post to scare users esp considering the industry is mainly company’s trying to provide cheap services, None disclosure of problems just causes headaches an leaves longer for issues to arise an cause problems.
SolusVM confirmed No Zero days was reported to em in past few days; concerning Login pages admin or client.
This message no wonder name was lol; Its just a wannabe trying to scare industry.