427 results found

1. Vulnerability Report

   Hi Hostsailor Security Team,
   I'm Yash Bug Bounty Hunter from India.

   Vulnerable Url:-
   https://vps.hostsailor.com/login.php
   Login Function is blocking through the IP.

   I would like to report rate limit issue based on IP blocking mechanism. Rate-limitation nowadays is not effective anymore to protect against brute-force. There are many botnets out there which can be used to overcome this hurdle, as well as cloud (VPS) services (e.g. Amazon AWS EIPs, Digital Ocean, ...), VPNs, proxies.
   We can use IP Rotation extension in Burpsuite to exploit IP Based Rate limiting.
   In this case I validated by changing my IP but in extension it automatically changes the IP after 5 attempts and Rate limit is bypassed.

   Many VPS providers today offer a whole /64 subnet range of IPv6 addresses (18.446.744.073.709.551.616 unique addresses), such as but not limited to:
   RamNode: $15/year (https://www.ramnode.com/vps.php)
   Hetzner: $3.9/month (https://www.hetzner.de/us/hosting/produktmatrix_vserver/vserver-produktmatrix)
   Vultr: $5/month (https://www.vultr.com/pricing/) and AWS too.

   One example of a similar vulnerability that was exploited by Black Hats in the past would be Apple's Celebgate scandal of January 2015, where celebrity passwords were brute-forced through an unprotected Apple authentication endpoint which is on IP based rate limit blocking. But in the case of Courier user can easily rotate the IP's and can cause denial of services to its victim, or can cause notification bombarding after every 5 request.

   Impact:-
   1) Rate limit bypassed.
   2) IP based Rate limit Bypass can cause Dos on courier users.

   Recommendation:-
   I'm recommending you to implement Captcha Verification to avoid such rate limit issue, or You can add rate limit on the basis of user's email address not IP address.
   So make brute force attack on login page and change IP after you get rate limited. I Don't have AWS subscription that why I'm demonstrating this with my free ( RiseupVPN ). Hope you will understand.

   Hi Hostsailor Security Team,
   I'm Yash Bug Bounty Hunter from India.

   Vulnerable Url:-
   https://vps.hostsailor.com/login.php
   Login Function is blocking through the IP.

   I would like to report rate limit issue based on IP blocking mechanism. Rate-limitation nowadays is not effective anymore to protect against brute-force. There are many botnets out there which can be used to overcome this hurdle, as well as cloud (VPS) services (e.g. Amazon AWS EIPs, Digital Ocean, ...), VPNs, proxies.
   We can use IP Rotation extension in Burpsuite to exploit IP Based Rate limiting.
   In this case I validated by changing my IP but in extension it… more

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  VPS Creation Options  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Add Ubuntu Support

   Please add Ubuntu 20 support for installing KVM Slave.

   Newer CPUs like AMD Ryzen 5950X and alike aren't fully supported on the 4.x and below 5.10.x kernels.

   For example, lower kernels can't do basic functions like detecting CPU operating frequency, only newer kernels support it. It has been the trend during the past few years.

   Detecting frequency is important for power and performance profiles.

   SolusVM is a good product itself. Would appreciate if you add support for Ubuntu for newer CPUs.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Add option to automatically configure VPS with custom config

   This would allow us to apply custom config to VPS on creation so we don't need to manually do it after the VPS is deployed.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Backend Automation  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Choose the IP randomly from WHMCS

   It would be nice if we have an option to pick the IP randomly from the IP block when create the VM from WHMCS.

   API is selecting the IP continuously in ascending or descending order from the IP block at the moment.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Billing Modules  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. backup information usability

   Would like improvement in backup usability information, It involves a few small things that will enhance usability:

   • please add extra column in virtual server list which indicate if the backup has been enabled for that VM (also a toggle switch)
   • please add the server hostname information at the end of the backup file name.
   • please add the server hostname information too at the email backup report
   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Backups  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Arrange OS list in Reseller package

   It is better to have an option to arrange OS templates because in a reseller login panel, when you create a VPS the list of OS are not arrange properly. This request is related to ticket #16115 - reseller login.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Templates  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Add a filter/feature in SolusVM to list the Online VM's and it's allocated disk and Plans.

   It would be good to have some kind of filters or option in SolusVM panle that should pull all the running VM (Online) information like it's disk usage,disk size and it's Plans in one page.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Future Scope  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Option to view the sum of all VM's Disk space allocation for a Node.

   It would be good to view the sum of all VM's allocated disk space in a Node.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Admin & User Interface  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. cloudflare

   Hello. CDN support is very useful for svm user. It just needs few lines of code in config.php, and can show real ip in svm interface and nginx log instead of cdn's ip.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Backend Automation  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. shut down a vps that causes high load

    Need a feature that will shutdown the VPS with high load

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  OpenVZ  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Allow resellers to manage additional types of resources

    Please implement an option for resellers to set additional resources - like the amount of CPU cores or CPU topology.

    Currently, a number of CPU cores is set in the configuration of a reseller for all VPS and CPU topology is taken from the configuration of a template used for VPS.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Admin & User Interface  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. IPv6 address as the main IP for VMs

    IPv6 address as the main IP for VMs

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Networking & IP Management  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Alphabetical sort for destination node dropdown on migration page

    Could we please have alphabetical sort for the destination node dropdown field for migrations? As our server list grows in size it has become more difficult to find the node we are looking for.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Admin & User Interface  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Add IPs in reserved state

    We would like to request a new feature for when adding a new network block and IPs in SolusVM that there is a checkbox or option to add the IP's in a reserved state. We sometimes acquire RIPE addresses and actually preconfigure them in SolusVM before our network team partner has completed the actual network configuration. Occasionally we've had orders coincidentally come in the same moment we are adding additional network blocks and get provisioned on the new network blocks that are not yet reserved or fully set up.

    Therefore we would like to be able to add network block new addresses in a reserved state immediately.

    We would like to request a new feature for when adding a new network block and IPs in SolusVM that there is a checkbox or option to add the IP's in a reserved state. We sometimes acquire RIPE addresses and actually preconfigure them in SolusVM before our network team partner has completed the actual network configuration. Occasionally we've had orders coincidentally come in the same moment we are adding additional network blocks and get provisioned on the new network blocks that are not yet reserved or fully set up.

    Therefore we would like to be able to add network block… more

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Networking & IP Management  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Create VM without any OS installed

    Client wish to purchase VM however they would like to install their own OS

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  KVM  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. virsh console access

    Please add console and serial to the autogenerated config so that admins can use
    virsh console vpsname

    Solus uses KVM as backend and should not limit its features.

    Currently one gets greeted with
    error: internal error: cannot find character device <null>

    Placing full XML config that includes serial and console in every VPS via Solus web panel to overcome this limitation is awkward.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Backend Automation  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Reseller Customization

    It would be useful to allow a list of plans to be selected when creating a reseller user. Currently you can only specify a resource pool which the user can create any size servers from, this can be an issue when allocating resource pool larger than a single piece of hardware. Having separate reseller plans (similar to the current admin plans page) and selecting the plans or plan group when creating a reseller user would be helpful. It would let a reseller create VPS using pre-set plans. This would allow better reseller functionality for some people so they can offer reseller options of their regular plans.

    The reseller features could be updated for various things around this, not just a specific plan template. Also the reseller area could be updated to reflect the new theme.

    It would be useful to allow a list of plans to be selected when creating a reseller user. Currently you can only specify a resource pool which the user can create any size servers from, this can be an issue when allocating resource pool larger than a single piece of hardware. Having separate reseller plans (similar to the current admin plans page) and selecting the plans or plan group when creating a reseller user would be helpful. It would let a reseller create VPS using pre-set plans. This would allow better reseller functionality for some people so they can offer… more

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Future Scope  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. IPv6 Auto config for windows VM's

    A method of auto configuring IPv6 for windows virtual servers as it already works for Linux would be beneficial.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. KVM - Standard flags to be set to pass to the XML on a per node basis

    With the last few intel CPU issues it would be beneficial for rapid mitigation to be able to set on a node basis some cpu flags that are automatically put in to all XML config files for every guest VM either newly created or upon reboot from the panel.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Allow WHMCS welcome mail and SolusVM 2 welcome mail includes the Gateway IP of the VM.

    It would be beneficial if the welcome email from WHMCS and the welcome email from SolusVM 2 included the Gateway IP of the VM.

    For certain operations, it is essential to provide the Gateway IP of the VM that they have ordered, so this feature is quite necessary for us.

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Billing Modules  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating