Comparison Overview
LDV Hospitality
LDV Hospitality
130 W 25th Street, 7th Floor, New York, New York, US, 10001
Last Update: 03/04/2026
LDV is a boutique hospitality group that creates authentic and unique restaurant and cocktail bar experiences, both independently and tailor-made for iconic hotel partners. Inspired by La Dolce Vita, "The Good Life," the group was founded by John Meadow in 2008. The ...
Hampton
7930 Jones Branch Drive, Suite 1100, McLean, 22102, US
Last Update: 01/04/2026
The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospit...
Compliance Ranges Comparison
LDV Hospitality
Hampton
Benchmark & Cyber Underwriting Signals
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for LDV Hospitality in 2026.
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for Hampton in 2026.
Incident History - LDV Hospitality (X = Date, Y = Severity)
LDV Hospitality cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Hampton (X = Date, Y = Severity)
Hampton cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
LDV Hospitality
Hampton
FAQ
Latest Global CVEs
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.
goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.