10000 Twitter User oauth token hacked and Exposed by Anonymous

Anonymous Hackers, with Twitter account "LulzsecReborn" Hack into TweetGif https://tweetgif.com and Hack complete Database, Later they publish that on the Internet also. TweetGif is a website which allows you to use animated GIF image as your twitter picture. LulzSec Reborn, a 3.0 version of the...

Google Open Redirects

Hi List, Here's another open redirect that works. https://accounts.google.com/o/oauth2/auth?redirecturi=http://www.bing.com This works as well. https://www.google.com/search?btnI&q=http://www.bing.com -- Regards, Riyaz Walikar...

(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure

Vulnerability in HTC Peep: Twitter Credentials Disclosure http://blog.taddong.com/2011/02/vulnerability-in-htc-peep-twitter.html Title: Twitter credentials disclosure in HTC Peep mobile app default HTC Twitter client Vulnerability ID: TAD-2011-001 Credits: This vulnerability was discovered by...

Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability

Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...

Drupal Twitter Module Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full text of this advisory can also be found at http://www.madirish.net/?article=447 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Password Protocol OAuth Gets New Variant

The developers behind the OAuth protocol have developed a new variant called OAuth WRAP that is simpler and easier to implement. It’s a stop-gap solution that will enable broader OAuth adoption while OAuth 2.0, the next generation of the specification, is devised by a working group that is...

Fedora Core 11 FEDORA-2009-10539 (perl-Net-OAuth)

The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10539. OpenVAS Vulnerability Test $Id: fcore200910539.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10539 perl-Net-OAuth Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)

The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. OpenVAS Vulnerability Test $Id: fcore200910520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10520 perl-Net-OAuth Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)

The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 11 FEDORA-2009-10539 (perl-Net-OAuth)

The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10539. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora 11 : perl-Net-OAuth-0.19-1.fc11 (2009-10539)

A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a...

Fedora 10 : perl-Net-OAuth-0.19-1.fc10 (2009-10520)

A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a...

[SECURITY] Fedora 11 Update: perl-Net-OAuth-0.19-1.fc11

Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...

[SECURITY] Fedora 10 Update: perl-Net-OAuth-0.19-1.fc10

Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...

Month Of Twitter Bugs - TweetMeme XSS

Tuesday, July 14, 2009 MoTB 14: Reflected XSS in TweetMeme What is TweetMeme "TweetMeme is a service which aggregates all the popular links on twitter to determine which links are popular. TweetMeme is able to categorize these links into categories and subcategories, making it easy to filter out...

Month Of Twitter Bugs - bit.ly XSS

Wednesday, July 1, 2009 MoTB 01: Multiple vulnerabilities in bit.ly service What is bit.ly "bit.ly allows users to shorten, share, and track links URLs. Reducing the URL length makes sharing easier. bit.ly can be accessed through our website, bookmarklets and a robust and open API. bit.ly is also...

Month Of Twitter Bugs - Twitterfall XSS

Wednesday, July 8, 2009 MoTB 08: DOM Based XSS in Twitterfall What is Twitterfall "Twitterfall is a way of viewing the latest 'tweets' of upcoming trends and custom searches on the micro-blogging site Twitter. Updates fall from the top of the page in near-realtime.." Twitterfall home page Twitter...

Month Of Twitter Bugs - yfrog XSS

Tuesday, July 7, 2009 MoTB 07: Reflected XSS vulns in yfrog What is yfrog "yfrog is a service run by ImageShack that lets you share your photos on and videos on Twitter." yfrog FAQ page Twitter affect yfrog can be used to send tweets by uploading new photos, or posting comments on existing photos...