854 matches found
One simple action you can take to prevent 99.9 percent of attacks on your accounts
There are over 300 million fraudulent sign-in attempts to our cloud services every day. Cyberattacks aren’t slowing down, and it’s worth noting that many attacks have been successful without the use of advanced technology. All it takes is one compromised credential or one legacy application to...
Android Users Can Now Log in to Google Services Using Fingerprint
If you're using Chrome on Android, you can now sign-in to your Google account and some of the other Google services by simply using your fingerprint, instead of typing in your password every time. Google is rolling out a new feature, called "local user verification ," that allows you to log in to...
GitLab: Cross-site Scripting (XSS) - Stored in RDoc wiki pages
Summary When creating an RDoc wiki page it's possible to use a large number of html tags and attributes that are normally sanitized, when creating a linkable image of the format link For example it is possible to specify a class attribute when creating an image link: rdoc a will generate the...
July 26, 2019—KB4505903 (OS Build 18362.267)
None None...
Sign in with Apple
What's in a Login Button? All you need to know about the new "Sign in with Apple" For Akamai Identity Cloud, we intend to support our clients that wish to implement "Sign in with Apple" just like we do for Facebook, Google, Instagram, Twitter, LinkedIn and about 30 other Identity Providers. If yo...
Is 'Sign in with Apple' Marketing Spin or Privacy Magic? Experts Weigh In
Apple’s “Sign in with Apple” feature promises to protect user privacy – and while many are looking at that claim as more of a marketing move than anything else, authentication experts say it has the potential to have an enormous impact on the data privacy ecosystem. The giant from Cupertino took...
Apple Launches Privacy-Focused 'Sign in with Apple ID' Feature at WWDC 2019
Just like 'login with Google,' 'login with Facebook,' Twitter, LinkedIn or any other social media site, you would now be able to quickly sign-up and log into third-party websites and apps using your Apple ID. What's the difference? Well, Apple claims that signing-in with Apple ID would protect...
WWDC 2019: Apple Takes Aim at Facebook on Privacy
Apple took a swipe at Facebook at its Worldwide Developers’ Conference WWDC on Monday, unveiling fresh privacy features for the upcoming version of its iOS operating system for iPhone and iPad iOS 13. Most notably, it took the wraps off of an authentication mechanism that will allow users to sign...
CVE-2018-20840
An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of...
Integer overflow
An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of...
CVE-2018-20840
The CVE-2018-20840 issue affects the Google API C++ Client and is triggered during Google Sign-In prior to 2019-04-10. The root cause is an unhandled exception arising from improper handling of ID tokens in client/auth/oauth2_authorization.cc, caused by misinterpreting an integer as a string. Thi...
May 28, 2019—KB4499147 (OS Build 16299.1182)
None None...
May 28, 2019—KB4499162 (OS Build 15063.1839)
None None...
UBUNTU-CVE-2015-9284
The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...
March 19, 2019—KB4489890 (OS Build 16299.1059)
None None...
March 19, 2019—KB4489894 (OS Build 17134.677)
None None...
PayPal: Stored XSS on https://paypal.com/signin via cache poisoning
Due to a configuration in frontend, caching servers, it was possible for a researcher to use request smuggling to convert a page request into a cached redirect. If the cached redirect were accessed by a legitimate user, an attacker's content would be rendered instead of the requested page. While...
Cross Site Request Forgery (CSRF)
github.com/gogs/gog is vulnerable to cross-site request forgery CSRF attack. The library does not properly validate the token for user sign-in process, allowing a malicious user to launch a cross-site request forgery attack...
xcomwifi.net XSS vulnerability
Open Bug Bounty ID: OBB-701844 Description| Value ---|--- Affected Website:| xcomwifi.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...