94 matches found
CVE-2024-0197-POC
CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK. I initially wanted to develop one, but eventually that turned out to be unnecessary. There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain...
ln-upgrade-dynamics
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023–2026 Saurabh Kumar, Bitcoin Data Labs Paper: arXiv:2610.30350 HTML, PDF · DOI 10.48550/arXiv.2610.30350 · Bitcoin Data Labs research. Builds on Does Client Diversity Protect the Lightning Network? arXiv:2610.20952, whi...
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023-2026
Every implementation of Bitcoin's Lightning payment network disclosed security vulnerabilities in 2026, and every advisory told operators to upgrade. Whether they do has never been measured, because Lightning gossip carries no software version. Matching the feature bits a node announces against t...
CVE-2026-3457
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.This issue affects Sentinel LDK Runtime: before 10.22...
EUVD-2026-16575
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.This issue affects Sentinel LDK Runtime: before 10.22...
CVE-2026-3457 Stored XSS vulnerability in Sentinel ACC
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22...
CVE-2026-3457 Stored XSS vulnerability in Sentinel ACC
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22...
CVE-2026-3457
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.This issue affects Sentinel LDK Runtime: before 10.22...
CVE-2026-3457
CVE-2026-3457 refers to an stored XSS vulnerability in Thales Sentinel LDK Runtime on Windows, caused by improper neutralization of input during web page generation. The issue affects Sentinel LDK Runtime prior to 10.22 and can lead to stored cross-site scripting with impact on confidentiality (l...
CVE-2026-3457: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22...
PT-2026-28634
Name of the Vulnerable Software and Affected Versions Thales Sentinel LDK Runtime versions prior to 10.22 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can...
EUVD-2017-3114
Malware in sbrugna...
EUVD-2018-20508
Malware in sbrugna...
EUVD-2017-4359
Malware in sbrugna...
EUVD-2021-19649
Malware in sbrugna...
EUVD-2017-4358
Malware in sbrugna...
EUVD-2018-18066
Malware in sbrugna...
EUVD-2017-4357
Malware in sbrugna...
CVE-2021-32928
The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...
