6675 matches found
WP API: Cryptographic Side Channel in OAuth Library
Because hashes and tokens are compared with the !== and === operators, these checks may be susceptible to timing attacks. More info: http://codahale.com/a-lesson-in-timing-attacks/ Affected code:...
Square: square google calendar integration CSRF,https://squareup.com/appointments/business/settings(state parameter not checking properly)
state parameter on oauth 2 application is used to prevent csrf attack!. i have found that if i removed the state parameter on google calendar integration, the integration is still work so your so attacker can connects his google account on his victim user. HACK STEPS GET THE GOOGLE CALENDAR...
MyFitnessPal App Patches Privacy Vulnerability
The details of a patched vulnerability in a popular mobile fitness application have been disclosed three months after a fixed was released. The flaw could have allowed a user to fetch the personal profile of another registered app user. MyFitnessPal deployed a fix on June 26 for a privacy flaw in...
Internet Bug Bounty: open redirect in rfc6749
OAuth Providers servers that strictly follow rfc6749 are vulnerable to open redirect. Let me explain, reading 0 If the request fails due to a missing, invalid, or mismatching redirection URI, or if the client identifier is missing or invalid, the authorization server SHOULD inform the resource...
Square: CRITICAL Account takeover via AngularJS template injection in connect.squareup.com
Hi! The OAUTH prompt at https://connect.squareup.com/oauth2/authorize?clientid=EXAMPLE prints out the current OAUTH appname without sanitizing it from -style AngularJS templates. This makes it possible for an attacker to add an AngularJS template to his/her appname that calls the $scope.allow...
OAuth authentication memory vulnerability caution a user identity hijacking-vulnerability warning-the black bar safety net
With OpenSSL, like OAuthOpen Authorizationas a widely used open-source third-party login authentication Protocol, this year also broke a security vulnerability. In the third session of the know the security Forum, from Sina Weibo of the blue di snowball shows Sina as early as year 3 months...
Keyring <= 1.5 - OAuth Example Page XSS
The Keyring WordPress plugin was affected by an OAuth Example Page XSS security vulnerability...
WePay: oauth redirect uri validation bug leads to open redirect and account compromise
according to: https://stage.wepay.com/developer/reference/oauth2 "redirecturi - The uri the user will be redirected to after authorization. Must have the same domain as the application." your current validation of this domain value is not sufficient. i setup my app with a website url of...
Facebook SDK vulnerability threatening millions of mobile phone users accounts-vulnerability warning-the black bar safety net
From MetaIntell the smartphone leadership risk management（MRM）security researchers, found a latest version of Facebook SDK vulnerability in the vulnerability exposes millions of Facebook user's authentication token, it still sounds very scary. ! Facebook for Android and IOS SDK provides the use o...
Facebook SDK Vulnerability Puts Millions of Smartphone Users' Accounts at Risk
Security researchers from MetaIntell, the leader in intelligent led Mobile Risk Management MRM, have discovered a major security vulnerability in the latest version of Facebook SDK that put millions of Facebook user's Authentication Tokens at risk. Facebook SDK for Android and iOS is the easiest...
CVE-2014-4595
Multiple cross-site scripting XSS vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 oauthcallback parameter to htmlapiauthorize.php or the 2 oauthtokentemp or 3 oauthcallbacktemp parameter to...
CVE-2014-4590
Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...
OAuth Request Crafter - Tool that helps you to play with OAuth signature protected URLs
OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why ? When dealing with OAuth signature protected URLs, For tampering...
CVE-2014-3476
OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...
Design/Logic Flaw
OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...
CVE-2014-3476
OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...
CVE-2014-3476
OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...
Factlink: Login CSRF using Twitter oauth
this bug allows a user to be logged in as the attacker. The main reason is that no state is maintained in the authentication flow. Although the Twitter flow still uses OAuth 1.0A, which has no state parameter as in OAuth 2, it is still possible to prevent this type of attack by setting an...
OAuth vulnerability alert (OAuth platform redirect_uri vulnerability)-vulnerability warning-the black bar safety net
1. First look at the vulnerability of the causes of: Interested you can the following url pasted into a browser to see the effect: http://chillyc.info.csdn.net Or this url: http://[email protected]?blog.csdn.net/ These Url in different browsers on the performance may be less consistent. But...
