CVE-2024-0197-POC

CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK. I initially wanted to develop one, but eventually that turned out to be unnecessary. There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain...

EUVD-2017-4359

Malware in sbrugna...

EUVD-2017-4356

Malware in sbrugna...

EUVD-2011-3303

Malware in sbrugna...

EUVD-2017-3114

Malware in sbrugna...

EUVD-2017-4358

Malware in sbrugna...

EUVD-2017-4357

Malware in sbrugna...

EUVD-2018-20508

Malware in sbrugna...

Exploit for Improper Privilege Management in Thalesgroup Sentinel_Hasp_Ldk

CVE-2024-0197-POC Proof of concept for Local Privilege Escalat...

CVE-2024-0197

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

Design/Logic Flaw

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2024-0197

CVE-2024-0197 affects the Windows installer of Thales SafeNet Sentinel HASP LDK, prior to version 9.16. The root cause is an installer flaw that enables local privilege escalation when an attacker already has local access. The impact is privilege elevation to SYSTEM with high confidentiality/inte...

PT-2024-15380 · Thales · Thales Safenet Sentinel Hasp Ldk

Name of the Vulnerable Software and Affected Versions: Thales SafeNet Sentinel HASP LDK versions prior to 9.16 Description: A flaw in the installer for Thales SafeNet Sentinel HASP LDK on Windows allows an attacker to escalate their privilege level via local access. Recommendations: For versions...

Thales SafeNet Security Vulnerability

Thales SafeNet is an enterprise authentication, data encryption, and key management solution from Thales USA. A security vulnerability exists in Thales SafeNet Sentinel HASP LDK prior to version 9.16, which stems from a flaw in the installer that allows an attacker to upgrade privileges via local...

CVE-2024-0197: Improper Privilege Management

A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access...

Gemalto HASP SRM, Sentinel HASP and Sentinel LDK Cross-Site Scripting Vulnerabilities

Gemalto HASP SRM, Sentinel HASP and Sentinel LDK are products of Gemalto, Inc. Gemalto HASP SRM and Sentinel HASP are cryptographic lock drivers. License Manager service is one of the license management services. A cross-site scripting vulnerability exists in the License Manager service in Gemalt...

Cross site scripting

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

CVE-2018-8900

CVE-2018-8900 affects Gemalto HASP SRM, Sentinel HASP, and Sentinel LDK licenses. The License Manager service (ACC) is vulnerable to cross-site scripting (XSS) in the logs page. Affected versions are listed variably across sources: CNVD cites 2.10–7.66; NVD notes all versions prior to Sentinel LD...

CVE-2018-8900: Improper Neutralization of Input During Web Page Generation

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

Gemalto HASP SRM, Sentinel HASP and Sentinel LDK Remote Code Execution Vulnerabilities

Gemalto HASP SRM and Sentinel HASP are both cryptographic lock drivers from Gemalto, U.S.A. Sentinel LDK is a license management tool. A remote code execution vulnerability exists in Gemalto HASP SRM, Sentinel HASP, and Sentinel LDK RTE versions prior to 7.6. A remote attacker could exploit this...