We are suspecting there’s another critical vulnerability in LNBank, external plugin. We advise anyone using the plugin and have public registration available on their instance to disable the plugin or registration immediately while plugin author investigates the report.


👀

nostr:nevent1qqsyqr7dtz9k8u04yu2rdsqglvpsjt4wgxvngcs7d75jae5sdxfhflgpzpmhxue69uhkummnw3ezuamfdejsyg99x6437leuqyem4tda73etrtr66jmhfm2r9svcj2zpjdtj0z9u5qpsgqqqqqqs0vwhxx


Yikes. Stop using the LNBank plugin, IMO.
nostr:nevent1qqsyqr7dtz9k8u04yu2rdsqglvpsjt4wgxvngcs7d75jae5sdxfhflgpz9mhxue69uhkummnw3ezuamfdejj7q3q55m2k8ml8sqn8w4dhh689vdv0t2twa8dgvkpnzfggxf4wfughjsqxpqqqqqqzx48ly8


#nostrfr faites attention à vous,

Pensez a désactiver ce plug-in

nostr:nevent1qqsyqr7dtz9k8u04yu2rdsqglvpsjt4wgxvngcs7d75jae5sdxfhflgpzpmhxue69uhkummnw3ezuamfdejsyg99x6437leuqyem4tda73etrtr66jmhfm2r9svcj2zpjdtj0z9u5qpsgqqqqqqs0vwhxx


sounds like this plugin shouldn't be used with public registrations


Alert

nostr:nevent1qqsyqr7dtz9k8u04yu2rdsqglvpsjt4wgxvngcs7d75jae5sdxfhflgprpmhxue69uhhyetvv9ujuumwdae8gtnnda3kjctvqgs22d4tralncqfnh2kmmarjkxk8449hwnk5xtqe3y5yry6hy7ytegqrqsqqqqqpm3uujs


I found the plugin had been automatically disabled and all I could do was remove it upon the last major update.


🚨 I will follow up with details, but for bow please uninstall LNbank.

nostr:nevent1qqsyqr7dtz9k8u04yu2rdsqglvpsjt4wgxvngcs7d75jae5sdxfhflgpzpmhxue69uhkummnw3ezumt0d5hsyg99x6437leuqyem4tda73etrtr66jmhfm2r9svcj2zpjdtj0z9u5qpsgqqqqqqs9tyuwk


Glad to see these things getting caught
nostr:note1gq8u6kytv0cl2fc5xmqq37crpyh2usvex33pumaf9mnfq6vnwn7s07fnz2