5050 matches found
OAuth Hacks A gentle introduction to OAuth 2 and Apache Oltu
Here I posted the slides of the JUG event in Basel. I have been kind of quiet lately in this space. I have a couple on vulnerabilities outstanding one OAuth related and one browser related. Waiting for the green light... stay tuned...
Dropbox Patches Remotely Exploitable Vulnerability in SDK
Developers at Dropbox recently fixed a remotely exploitable vulnerability in the Android SDK version of the storage app that enabled attackers to connect applications to a Dropbox account without the user’s consent. This could have opened users up to the theft of information from any app that use...
Design/Logic Flaw
The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding opt parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scop...
CVE-2014-7922
The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding opt parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scop...
CVE-2014-7922
CVE-2014-7922 involves the GoogleAuthUtil.getToken method in the Google Play services SDK prior to 2015. The vulnerability arises when the code sets parameters in OAuth token requests after detecting a corresponding opt parameter in the Bundle extras argument, enabling a crafted application to by...
CVE-2014-7922
The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding opt parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scop...
Coinbase: open authentication bug
Hi, If developer registers one of the three url's with out http protocol ex:example.com in oauth registration then he would be redirected to www.coinbase.comexample.com.This makes the user to redirect to another site than the real application.Attacker could take advantage of this and steal the...
X (Formerly Twitter): Problem with OAuth
There are many website that tracks the unfollowers and all like: http://unfollowerstats.com Steps: 1. Login with ur twitter account, i.e. [email protected] 2. Open http://unfollowerstats.com, This will ask you to login with twitter: 3. you will get a link like this:...
X (Formerly Twitter): Flaw in login with twitter to steal Oauth tokens
Hey hi, Steps to reproduce: ============================================= I have been testing the twitter kit in fabric. I added login with twitter integration to my application. I pushed the application to my android phone , clicked login with twitter. entered my username and password. Searched ...
Vimeo: unvalid open authentication with facebook
Hi, vimeo site is using facebook for open authentication . The authentication url is in this way https://www.facebook.com/dialog/oauth?clientid=19884028963&redirecturi=https://vimeo.com/facebook/join?ssl=0&iframe=0&popup=0&player=0&productid=0&scope=email,basicinfo,readstream,publishactions&state...
Top 5 OAuth 2 Implementation Vulnerabilities
Heya, back to my favourite topics namely OAuth . I have previously discussed about common OAuth 2 Implementation Vulnerabilities but now it is time maybe to list those and order them based on their criticality. 5 The Postman Always Rings Twice I have introduced this 'attack' in last year post...
Moonpig API Vulnerability Exposes Payment Card Data
Moonpig, a U.K.-based company that sells personalized greeting cards, mugs, t-shirts and other novelties, has been taken to the woodshed for poor security practices by a researcher who claims it’s simple to pilfer user and payment card data through a wonky mobile app API. The company this morning...
CVE-2014-8144
Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...
CVE-2014-8144
Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...
CVE-2014-8144
CVE-2014-8144 concerns the Doorkeeper gem (Rails) and is evidenced by multiple sources in connected documents. The vulnerability is a CSRF flaw in Doorkeeper before 1.4.1 that allows remote attackers to hijack a user’s OAuth authentication by reading a user’s authorization code via unknown vector...
Cross-site request forgery (CSRF) vulnerability in doorkeeper 1.4.0 and earlier.
Cross-site request forgery CSRF vulnerability in doorkeeper 1.4.0 and earlier allows remote attackers to hijack the user's OAuth autorization code. This vulnerability has been assigned the CVE identifier CVE-2014-8144. Doorkeeper's endpoints didn't have CSRF protection. Any HTML document on the...
wecenter重定向漏洞导致可挟持微博用户
简要描述： 尽管新浪已经修复了OAuth的redirecturi重定向漏洞,但是不怕神一样的对手 就怕... 这个就是一个样列... 详细说明： /app/account/main.php 191行开始 public function syncloginaction if getsetting'ucenterenabled' == 'Y' if $ucuid = $this-model'ucenter'-isucuser$this-userinfo'email' $synccode = $this-model'ucenter'-synclogin$ucuid; if $GET'url'...
WP API: Cryptographic Side Channel in OAuth Library
Because hashes and tokens are compared with the !== and === operators, these checks may be susceptible to timing attacks. More info: http://codahale.com/a-lesson-in-timing-attacks/ Affected code:...
Square: square google calendar integration CSRF,https://squareup.com/appointments/business/settings(state parameter not checking properly)
state parameter on oauth 2 application is used to prevent csrf attack!. i have found that if i removed the state parameter on google calendar integration, the integration is still work so your so attacker can connects his google account on his victim user. HACK STEPS GET THE GOOGLE CALENDAR...