Leakage of third-party OAuth token via redirect

# Description The application allows the usage of third-parties to store the files, such as Google Drive, Github, Gitlab, etc. It's possible to bypass the protection of the `redirect` parameter and re ...

Continue Reading
Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack

Researchers are warning attackers can abuse Microsoft Office 365 functionality to target files stored on SharePoint and OneDrive in ransomware attacks. Those files, stored via “auto-save” and backed ...

Continue Reading
Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

The nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resu ...

Continue Reading
Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

The nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resu ...

Continue Reading
(RHSA-2022:5030) Important: Red Hat Fuse Online 7.10.2.P1 security update

This release of Red Hat Fuse 7.10.2.P1 serves as a replacement for Red Hat Fuse 7.10 and includes bug fixes and enhancements, which are documented in the Release Notes document linked in the Reference ...

Continue Reading
A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage

[![Ransomware Hackers](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEiuH6O1BLHKCwU8Cch8jPARIaJkgaPWfU1MR3qlLBEe6sXG0-ESC8C1KxlIafZXmkuKFSZvKV1ZePipByuOXdIPz4KHx-MUEUXHGsXZ0qLoOjBWLUriN49W1 ...

Continue Reading
PYSEC-2022-206

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is pr ...

Continue Reading
Description of the security update for SharePoint Server Subscription Edition: June 14, 2022 (KB5002224)

None ## Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft Office information disclosure vulnerability. To learn more about the vulne ...

Continue Reading

Back to Main

Subscribe for the latest news: