7217 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth provider...
CVE-2015-7417: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth provider...
PT-2016-3768
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 7.0.0.40 IBM WebSphere Application Server versions 8.0 through 8.0.0.11 IBM WebSphere Application Server versions 8.5 through 8.5.5.8 Description A cross-site scripting XSS issue allows...
Shopify: Attach Pinterest account - no State/CSRF parameter in Oauth Call back
Hello There is no csrf protection for oauth call backs to attach a pinterest account. An attacker can escalate this to attach his account with the victims profile and monitor his activities. Vulnerable URL:...
X (Formerly Twitter): Bypassing Digits bridge origin validation
Hi, I would like to report an issue in the bridge proxy in Digits which allows attacker to retrieve the OAuth credential data of an application victims authorized. Detail In the Digits Web SDK, the method getLoginStatus can be used to retrieve the OAuth credential data of an application if the us...
X (Formerly Twitter): Insufficient OAuth callback validation which leads to Periscope account takeover
Hi, I would like to report an issue in the Periscope Twitter application which allows attacker to circumvent the callback locking to takeover victim's Periscope account which is connected to a Twitter account. Detail In the mobile Periscope app, the consumerkey and consumersecret for Twitter...
X (Formerly Twitter): Bypassing callback_url validation on Digits
Hi, I would like to report an issue in Digits which allows attacker to bypass the callbackurl validation of an application and thus takeover an account. Detail Digits is a part of the Fabric SDK which offers phone-based sign in. It also provides web login flow. In the navigation-based...
Scientific Linux Security Update : rest on SL7.x x86_64 (20151119)
It was found that the OAuth implementation in librest, a helper library for RESTful services, incorrectly truncated the pointer returned by the restproxycallgeturl call. An attacker could use this flaw to crash an application using the librest library. CVE-2015-2675 After installing the update, a...
Coinbase: Race condition allowing user to review app multiple times
There was a race condition present that would allow a user to review an OAuth application multiple times...
Top 10 OAuth 2 Implementation Vulnerabilities
Some time ago I posted a blogpost abut Top 5 OAuth 2 Implementation Vulnerabilities. This week I have extended the list while presenting Top X OAuth 2 Hacks at OWASP Switzerland. This blog post like the presentation is just a collection of interesting attack OAuth related. 10 The Postman Always...
Shopify: CSRF in Connecting Pinterest Account
Hi, The connect to Pinterest function is vulnerable to CSRF. This allows an attacker to connect his/her pinterest account to the victim's shopify. Even if the victim has already connected a pinterest account, this will allow the attacker to replace the existing connected pinterest account with th...
oauth.mts.ru XSS vulnerability
Vulnerable URL: https://oauth.mts.ru/social-2.0/buttons.jsp?goto=https%3A%2F%2Fihelper.mts.ru%3A443%2Fselfcare%2Fproduct-2-view.aspx...
CentOS 7 : rest (CESA-2015:2237)
Updated rest packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...
rest security update
CentOS Errata and Security Advisory CESA-2015:2237 Updated rest packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
[SECURITY] Fedora 23 Update: python-rauth-0.7.2-1.fc23
A simple Python OAuth 1.0/a, OAuth 2.0, and Ofly consumer library built...
Coinbase: Stored-XSS in https://www.coinbase.com/
Coinbase was mistakenly allowing developers to set their website or developer URL to a javascript:// or data:// URL. This link would then be rendered into the OAuth authorization page and leave users vulnerable to XSS if they clicked on it...
Shopify: CSV Excel Macro Injection Vulnerability in export list of current users - app.shopify.com
Hi , I have found that when a user tries to Export list of current users who installed his apps through: https://app.shopify.com/services/partners/apiclients//exportinstalledusers the fields of the CSV file are not properly escaped. which makes them vulnerable to CSV Excel Macro Injection...
RHEL 7 : rest (RHSA-2015:2237)
Updated rest packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...
Low: Red Hat Security Advisory: rest security update
Updated rest packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...