NEWS > Lab

X41 finished auditing the Backstage platform and releases the resulting report.

X41 discovered a vulnerability in Chilkat's ASN.1 decoder

X41 discovered multiple vulnerabilities in Antragsgrün

The Chilkat library generated secret key material using a pseudorandom number generator not designed for cryptographic purposes. Attackers observing a sufficient number of outputs can recover past and future outputs of it. This includes, for example, key material generated with it, allowing attackers to decrypt or alter data protected by the key material.

X41 releases the code audit report of BIND 9

Yasar Klawohn and JM of X41 discovered multiple vulnerabilities in OPNsense

X41 releases the audit report of Git

X41 releases the audit report of The Update Framework.

X41 finished auditing the Backstage platform and releases the resulting report.

AnyZone lets you easily get a delegated zone for testing purposes without touching zone files

As part of his master thesis Leonard Rapp analyzed the security of various popular unikernels. This blogpost is the last one in the unikernel series. It discusses some of the findings and draws a conclusion.

Several security weaknesses and missing mitigations were discovered in various unikernel systems

The research unikernel RustHermit was further audited for security vulnerabilities and effectiveness of its mitigations.

CVE-2021-34600: How predictable random numbers (literally) open the door for attackers: Our discovery of a flaw in the generation of AES keys, used for both physical and remote access, in a popular alarm system's parameterization software. Includes a proof-of-concept for cloning NFC tags!

The compasX parameterization software for complex alarm systems generated the AES keys used for both physical access control (via NFC tags) and remote management in an insecure fashion.

The research unikernel RustyHermit lacks of several memory protection mechanisms which significantly ease attacks on vulnerable applications

An off-by-one error in ngx_resolver_copy() while processing DNS responses allows a network attacker to write a dot character ('.', 0x2E) out of bounds in a heap allocated buffer.

Reconstructing a QR Code from partially censored images.

Luis Merino of X41 discovered multiple vulnerabilities in YARA

The patch for CVE-2020-16875 in Microsoft Exchange can bypassed to gain remote code execution again.