About

Alphabot Security supports developers by continuously looking at open-source technologies in order to identify new vulnerabilities and improve their supply chain security.

Armor defensive computing project

The Armor defensive computing project collects proven defensive techniques such as Arm's Memory Tagging Extension (MTE) to protect your systems against current and future threats.

Discovered Vulnerabilities

(This list is not complete.)

• CVE-2021-26423: Microsoft .NET Core: Remote Denial of Service Vulnerability
• CVE-2021-22160: Apache Pulsar: Improper Verification of Cryptographic Signature
• CVE-2020-15150: Paginator (for Elixir Ecto): Remote Code Execution Vulnerability
• CVE-2020-11050: Java-WebSocket: Improper Validation of Certificate with Host Mismatch
• CVE-2020-9488: Apache Log4j: Improper validation of certificate with host mismatch
• CVE-2020-2252: Jenkins: Missing hostname validation in Mailer Plugin
• CVE-2020-1758: Keycloak: Improper validation of certificate with host mismatch
• CVE-2018-17187: Apache Qpid Proton-J: Transport TLS wrapper hostname verification mode not implemented
• CVE-2018-11775: ActiveMQ Client: Missing TLS Hostname Verification
• CVE-2018-11087: RabbitMQ (Spring-AMQP): Missing Host name verification
• CVE-2018-8540: Microsoft .NET Framework: Remote Code Injection Vulnerability

Contact

Contact Alphabot Security:
security@alphabot.com

PGP

Download PGP Public Key

Key Fingerprint: AB4D A1E3 CEC2 C2E0 FA4D CCD6 D70B CE4F ABB1 3E56