SUSE-SU-2020:1864-1 Security update for nasm

nasm was updated to version 2.14.02: Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. Create all system-defined macros defore processing command-line given preprocessing directives -p, -d, -u, --pragma, --before. If debugging is enabled,...

SUSE-SU-2020:1843-1 Security update for nasm

This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

Digital Signature Hijack - Binaries, PowerShell Scripts And Information About Digital Signature Hijacking

Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a PowerShell script based on...

Open-Xchange OX Guard Code Issue Vulnerability

Open-Xchange OX Guard is an encryption software from Open-Xchange USA. The software is mainly used for encryption/decryption of emails and documents. A code issue vulnerability exists in Open-Xchange OX Guard 2.10.3 and prior versions. The vulnerability arises from an improperly designed or...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2020-53118)

Open-Xchange OX Guard is an encryption software from Open-Xchange USA. The software is mainly used for encryption/decryption of emails and documents. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.10.3 and earlier versions. The vulnerability stems from a lack of proper...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

Cross site scripting

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

Server side request forgery (ssrf)

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

Open-Xchange Open-Xchange OX Guard 2.10.3 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application due to inadequate validation of client data. The issue allows execution of client-side code via manipulated input (e.g., forged public-keys) displayed in Guard se...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9427

OX Guard 2.10.3 and earlier contains an SSRF vulnerability in the guard component. Affected product: Open-Xchange OX Guard (versions up to 2.10.3). Root cause: improper handling leading to Server-Side Request Forgery. Impact: as described in public advisories; exploit details are corroborated by ...

OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery Vulnerabilities

Exploit for php platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...

Researchers Expose a New Vulnerability in Intel's CPUs

The Software Guard eXtension is supposed to protect encryption keys and other sensitive data. But this isn't the first time it's been defeated...

OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery

Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.10.2-rev9, 2.10.3-rev4 Vendor notification...

Intel CPUs Vulnerable to New 'SGAxe' and 'CrossTalk' Side-Channel Attacks

Cybersecurity researchers have discovered two distinct attacks that could be exploited against modern Intel processors to leak sensitive information from the CPU's trusted execution environments TEE. Called SGAxe, the first of the flaws is an evolution of the previously uncovered CacheOut attack...