Open-Xchange: OX (Guard): Stored Cross-Site Scripting via Incoming Email

Summary "OX Guard" introduces a Stored Cross-Site Scripting XSS vulnerability to the frontend. HTML/JS code can be injected into the frontend through an incoming email. Injected code will be executed = become part of the DOM the moment the victim opens the email. The vulnerability allows for...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

CVE-2016-1461 affects Cisco AsyncOS on Email Security Appliance (ESA) devices up to 9.7.0-125. The vulnerability stems from the file-type filtering feature: an attacker can craft an email attachment to bypass malware detection. Impact is bypass of malware detection, enabling potential malware del...

Cisco Email Security Appliance File Type Filtering Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA to fail to detect and act upon a specific type of file that is attached to an email message. The vulnerability is due to...

Cisco Email Security Appliance File Type Filtering Vulnerability

Cisco Email Security Appliance ESA is a set of e-mail security appliances from the American company Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. A file type filtering vulnerability exists in Cisco ESA. An attacker could exploit th...

Threat Outbreak Alert RuleID23906: Email Messages Distributing Malicious Software on July 21, 2016

Medium Alert ID: 47185 First Published: 2016 July 21 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23906 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23908: Email Messages Distributing Malicious Software on July 20, 2016

Medium Alert ID: 47164 First Published: 2016 July 20 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23908 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23886: Email Messages Distributing Malicious Software on July 19, 2016

Medium Alert ID: 47136 First Published: 2016 July 19 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23886 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23877: Email Messages Distributing Malicious Software on July 18, 2016

Medium Alert ID: 47124 First Published: 2016 July 18 19:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23877 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID23742: Email Messages Distributing Malicious Software on July 5, 2016

Medium Alert ID: 46991 First Published: 2016 July 5 16:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23742 may contain the following files: Name | Size...

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow PoC Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in...

Symantec Decomposer Engine Multiple Parsing Vulnerabilities

SUMMARY Symantec is aware of buffer overflow and memory corruption findings in the AntiVirus Decomposer engine used in various configurations by multiple Symantec products. FAQ on Impact to Symantec Products: AFFECTED PRODUCTS Affected Enterprise Products Product | Version | Solutions ---|---|---...

Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability

A vulnerability in the anti-spam filter of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a reference...

CVE-2016-1438

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

CVE-2016-1438

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

Design/Logic Flaw

Cisco AsyncOS 9.7.0-125 on Email Security Appliance ESA devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210...

Cisco Email Security Appliance AsyncOS Security Bypass Vulnerability

Cisco AsyncOS on Email Security Appliance ESA is a set of operating systems running in the Email Security Appliance ESA from Cisco USA. A security bypass vulnerability exists in Cisco AsyncOS version 9.7.0-125 on Cisco ESA appliances. A remote attacker could exploit this vulnerability to bypass...

CVE-2016-1438

CVE-2016-1438 affects Cisco AsyncOS on Email Security Appliance (ESA) 9.7.0-125. It exploits improper handling of content in .zip files to bypass the anti-spam filtering, enabling remote attackers to bypass filtering via a crafted ZIP payload. Exploitation details in public sources align with a b...