Lucene search

Five OAuth Bugs Lead to Github Hack

🗓️ 11 Feb 2014 10:58:53Reported by Chris BrookType

Russian researcher discovers and strings together five low-severity OAuth bugs on Github to create a high severity exploit, gaining access to users' private repositories

Reporter	Title	Published	Views	Family All 99
Dsquare	Apache Struts 2 Multiple Tags Result Namespace Handling RCE	20 Oct 201800:00	–	dsquare
exploitpack	Apache Struts 2.3 2.3.34 2.5 2.5.16 - Remote Code Execution (1)	26 Aug 201800:00	–	exploitpack
RedhatCVE	CVE-2018-11776	22 Aug 201808:49	–	redhatcve
IBM Security Bulletins	Security Bulletin: Content Collector for Email, File Systems, Microsoft SharePoint and IBM Connections are affected by a publicly disclosed vulnerability found by vFinder: Eclipse Jetty	12 Nov 201812:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Publicly disclosed Apache Struts vulnerability	28 Sep 201804:30	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer	25 Sep 201813:15	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Platform Application Center	25 Sep 201813:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Struts affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (CVE-2018-11776)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Struts affects the IBM FlashSystem 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Struts affects the IBM FlashSystem V840	18 Feb 201915:05	–	ibm

Source	Link
threatpost	www.threatpost.com/github-launches-bug-bounty-program/103974
homakov	www.homakov.blogspot.com/2014/02/how-i-hacked-github-again.html
gist	www.gist.github.com/
developer	www.developer.github.com/v3/oauth/
homakov	www.homakov.blogspot.com/2014/01/evolution-of-open-redirect-vulnerability.html
homakov	www.homakov.blogspot.com/2012/03/how-to.html
homakov	www.homakov.blogspot.com/2013/03/hacking-github-with-webkit.html
twitter	www.twitter.com/homakov/status/431685133570031617

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Feb 2014 10:53Current

8.8High risk

Vulners AI Score8.8

EPSS0.973