CVE-2014-8144

Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...

PT-2014-8432

Name of the Vulnerable Software and Affected Versions doorkeeper versions prior to 1.4.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims for requests that read a user OAuth authorization code. Recommendations For versions prior t...

CVE-2014-8144: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors...

Cross-site request forgery (CSRF) vulnerability in doorkeeper 1.4.0 and earlier.

Cross-site request forgery CSRF vulnerability in doorkeeper 1.4.0 and earlier allows remote attackers to hijack the user's OAuth autorization code. This vulnerability has been assigned the CVE identifier CVE-2014-8144. Doorkeeper's endpoints didn't have CSRF protection. Any HTML document on the...

wecenter重定向漏洞导致可挟持微博用户

简要描述： 尽管新浪已经修复了OAuth的redirecturi重定向漏洞,但是不怕神一样的对手 就怕... 这个就是一个样列... 详细说明： /app/account/main.php 191行开始 public function syncloginaction if getsetting'ucenterenabled' == 'Y' if $ucuid = $this-model'ucenter'-isucuser$this-userinfo'email' $synccode = $this-model'ucenter'-synclogin$ucuid; if $GET'url'...

WP API: Cryptographic Side Channel in OAuth Library

Because hashes and tokens are compared with the !== and === operators, these checks may be susceptible to timing attacks. More info: http://codahale.com/a-lesson-in-timing-attacks/ Affected code:...

Square: square google calendar integration CSRF,https://squareup.com/appointments/business/settings(state parameter not checking properly)

state parameter on oauth 2 application is used to prevent csrf attack!. i have found that if i removed the state parameter on google calendar integration, the integration is still work so your so attacker can connects his google account on his victim user. HACK STEPS GET THE GOOGLE CALENDAR...

MyFitnessPal App Patches Privacy Vulnerability

The details of a patched vulnerability in a popular mobile fitness application have been disclosed three months after a fixed was released. The flaw could have allowed a user to fetch the personal profile of another registered app user. MyFitnessPal deployed a fix on June 26 for a privacy flaw in...

Internet Bug Bounty: open redirect in rfc6749

OAuth Providers servers that strictly follow rfc6749 are vulnerable to open redirect. Let me explain, reading 0 If the request fails due to a missing, invalid, or mismatching redirection URI, or if the client identifier is missing or invalid, the authorization server SHOULD inform the resource...

Square: CRITICAL Account takeover via AngularJS template injection in connect.squareup.com

Hi! The OAUTH prompt at https://connect.squareup.com/oauth2/authorize?clientid=EXAMPLE prints out the current OAUTH appname without sanitizing it from -style AngularJS templates. This makes it possible for an attacker to add an AngularJS template to his/her appname that calls the $scope.allow...

OAuth authentication memory vulnerability caution a user identity hijacking-vulnerability warning-the black bar safety net

With OpenSSL, like OAuthOpen Authorizationas a widely used open-source third-party login authentication Protocol, this year also broke a security vulnerability. In the third session of the know the security Forum, from Sina Weibo of the blue di snowball shows Sina as early as year 3 months...

Keyring <= 1.5 - OAuth Example Page XSS

The Keyring WordPress plugin was affected by an OAuth Example Page XSS security vulnerability...

WePay: oauth redirect uri validation bug leads to open redirect and account compromise

according to: https://stage.wepay.com/developer/reference/oauth2 "redirecturi - The uri the user will be redirected to after authorization. Must have the same domain as the application." your current validation of this domain value is not sufficient. i setup my app with a website url of...

Facebook SDK vulnerability threatening millions of mobile phone users accounts-vulnerability warning-the black bar safety net

From MetaIntell the smartphone leadership risk management（MRM）security researchers, found a latest version of Facebook SDK vulnerability in the vulnerability exposes millions of Facebook user's authentication token, it still sounds very scary. ! Facebook for Android and IOS SDK provides the use o...

Facebook SDK Vulnerability Puts Millions of Smartphone Users' Accounts at Risk

Security researchers from MetaIntell, the leader in intelligent led Mobile Risk Management MRM, have discovered a major security vulnerability in the latest version of Facebook SDK that put millions of Facebook user's Authentication Tokens at risk. Facebook SDK for Android and iOS is the easiest...

CVE-2014-4590

Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...

CVE-2014-4595

Multiple cross-site scripting XSS vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 oauthcallback parameter to htmlapiauthorize.php or the 2 oauthtokentemp or 3 oauthcallbacktemp parameter to...

PT-2014-6004

Name of the Vulnerable Software and Affected Versions WP Microblogs plugin versions 0.4.0 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the oauth verifier parameter in the get.php file. Recommendations For WP...

PT-2014-6008

Name of the Vulnerable Software and Affected Versions WP RESTful plugin versions 0.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the oauth callback parameter to "html api authorize.php", or the oauth token temp or oaut...

OAuth Request Crafter - Tool that helps you to play with OAuth signature protected URLs

OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why ? When dealing with OAuth signature protected URLs, For tampering...