NEWS > Lab

June 13, 2019
Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird
Luis Merino of X41 discovered a heap-based buffer overflow in Thunderbird
April 24, 2019
X41 BeanStack - Java Fingerprinting Database
X41 is proud to present X41 BeanStack - a Java Stacktrace Fingerprinting service - to the security community!
December 14, 2018
Advisory X41-2018-009: DoS Vulnerability in UA-Parser
Luc Gommans of X41 discovered a vulnerability in UA-Parser
December 04, 2018
Happy Holidays
Happy Holidays!
October 09, 2018
Firefox Updates
X41 D-Sec reviewed the Mozilla Firefox Update Process.
September 19, 2018
Researching The FAX Machine Attack Surface
X41 Researched into the security of FAX machines and identified remotely exploitable vulnerabilities.
September 18, 2018
Advisory X41-2018-008: Multiple Vulnerabilities in hylafax
Luis Merino of X41 discovered a security bug in hylafax
September 11, 2018
Advisory X41-2018-007: Multiple Vulnerabilities in mgetty
Eric Sesterhenn of X41 discovered multiple vulnerabilities in mgetty
August 11, 2018
In Soviet Russia Smartcard Hacks You
Imagine breaking into an IT-system by just inserting a manipulated smartcard.
February 03, 2018
Advisory X41-2018-005: Multiple Vulnerabilities in smartcardservices
Eric Sesterhenn of X41 discovered multiple vulnerabilities in smartcardservices
February 03, 2018
Advisory X41-2018-004: Off-by-one zero write in libykneomgr
Eric Sesterhenn of X41 discovered an off-by-one write in libykneomgr
February 03, 2018
Advisory X41-2018-003: Multiple Vulnerabilities in pam_pkcs11
Eric Sesterhenn of X41 discovered multiple vulnerabilities in pam_pkcs11
February 03, 2018
Advisory X41-2018-002: Multiple Vulnerabilities in OpenSC
Eric Sesterhenn of X41 discovered multiple vulnerabilities in OpenSC
February 03, 2018
Advisory X41-2018-001: Multiple Vulnerabilities in Yubico-Piv
Eric Sesterhenn of X41 discovered multiple vulnerabilities in Yubico-Piv
December 18, 2017
Advisory X41-2017-009: Remote command execution in Shadowsocks auto-ss
Niklas Abel of X41 discovered remote command execution in Shadowsocks auto-ss.
December 18, 2017
Advisory X41-2017-007: Remote command execution in Shadowsocks ConnecTion
Niklas Abel of X41 discovered remote command execution in ShadowSocks ConnecTion.
November 15, 2017
Advisory X41-2017-011: Multiple Vulnerabilities in Antragsgrün
Eric Sesterhenn of X41 discovered multiple vulnerabilities in the Antragsgrün web application
November 14, 2017
Kernel Fuzzing in Userspace
During some spare time between projects, we tried fuzzing the Linux kernel ASN.1 parsers in user space.
November 10, 2017
Advisory X41-2017-006: Multiple Vulnerabilities in PSFTPd Windows FTP server
X41 discovered multiple vulnerabilities in the PSFTPd Windows FTP server
October 13, 2017
Advisory X41-2017-010: Command Execution in shadowsocks-libev
Niklas Abel of X41 discovered command execution in shadowsocks-libev.
Background Image