Grafana -- OAuth Account Takeover

Grafana Labs reports: It is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under some conditions...

OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass

The plugin allows attackers to login as any user by just knowing their email address PoC POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded [email protected]...

OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass

The plugin allows attackers to login as any user by just knowing their email address POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded option=mooauth&[email protected]...

Malicious code in hello-oauth-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3597 Malicious code in hello-oauth-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9a2c5c46b8e8654ac9432c80b3ce72083cda20ffada8ef7098636fd56eae3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6849 Malicious code in usaa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4881d055d1bbdbb5e052049f12b99e7672524d2efa4d9e1bb490b6da322f1771 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6807 Malicious code in uphold-client-credentials-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a6ff91dfe2ca9fdd4154417d7e9abc79b3e51e42edf5011f0a67c40ba63f2a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6805 Malicious code in uphold-authorization-code-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f9fcf4a7641090bcac961c4bf198b220a96562cb48390c5bf3bc8ed1053de38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uphold-authorization-code-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f9fcf4a7641090bcac961c4bf198b220a96562cb48390c5bf3bc8ed1053de38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uphold-authorization-code-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e98b7280da6cbb8c745119a06b97f7c1c78e2f55333d2cb612565044e85008d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6804 Malicious code in uphold-authorization-code-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e98b7280da6cbb8c745119a06b97f7c1c78e2f55333d2cb612565044e85008d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6806 Malicious code in uphold-client-credentials-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee1618d8c0e16c0718fa14f46a31d597153805eebeba4ff495446ce39908d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js_oauth_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0218496a3fc7753e37ab0c1dfd0c7202b20aba528bc803d8e397a19565329d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WP OAuth Server ( Login with WordPress ) < 4.0.1 - Authentication Bypass

The plugin is affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the client’s...

Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

The nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in sensitive information such as OAuth bearer access tokens being inadvertently exposed to...

A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage

A "dangerous piece of functionality" has been discovered in Microsoft 365 suite that could be potentially abused by a malicious actor to mount attacks on cloud infrastructure and ransom files stored on SharePoint and OneDrive. The cloud ransomware attack makes it possible to launch file-encryptin...

CVE-2022-31069

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in...

CVE-2022-31069 Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in...

CLSA-2022-1655317708 Fix CVE(s): CVE-2022-22576

SECURITY UPDATE: Reusing OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials - debian/patches/CVE-2022-22576.patch: Check additional SASL parameters for connection reuse - CVE-2022-22576...