EUVD-2015-3963

Malware in sbrugna...

Code injection

Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object...

CVE-2015-3931

Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object...

CVE-2015-3932

Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object...

CVE-2015-3932: XML Injection (aka Blind XPath Injection)

Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object...

PT-2017-6708

Name of the Vulnerable Software and Affected Versions Microsec e-Szigno versions prior to 3.2.7.12 Description The issue allows remote attackers to perform XML signature wrapping attacks. This can be achieved via an e-akta signed document with a ds:Object node that contains a crafted payload...

PT-2017-6709

Name of the Vulnerable Software and Affected Versions Netlock Mokka versions prior to 2.7.8.1204 Description The issue allows remote attackers to perform XML signature wrapping attacks. This can be achieved via an e-akta signed document with a ds:Object node that contains a crafted payload...

CVE-2015-3931: XML Injection (aka Blind XPath Injection)

Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object...