HackerOne: Adding an user email address to the list before confirming.

I know many of the penetration tester's email address.And many of them will be interested to join on hackerone. Well lets think of a scenario. I used some other penetration tester's email address to create an account on hackerone.And I choosed the username to be "somethingerotic" I know that user...

Ultrasonic Password Security for Google Accounts

Does a Strong Password Guarantee you the Security of your Online Account? If yes, then you should once check out our 'Data breaches' section on the website. A Startup Company, SlickLogin has developed a technology that enables you to login into online accounts using Ultrasonic sound, instead of...

eBay Open to Cross-Site Request Forgery, Account Hijacking

EBay is vulnerable to a hack that would allow an attacker to hijack an account and make unauthorized purchases from the victim’s account that would be difficult to disprove. The vulnerability was discovered and reported to eBay in August, and despite three separate communications from the online...

ShopXp shop system v3. x override+SQL injection-vulnerability warning-the black bar safety net

The injection point | 1 | http://192.168.1.106/admin/pinglun.asp?id=71 UNION SELECT 1,2,admin,4,5,6,7,8,9,password,1 1 from shopxpadmin ---|--- !...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

The use of SMS hijacking of Facebook accounts-vulnerability warning-the black bar safety net

This article will demonstrate a simple bug. Exploit this vulnerability without user interaction, you can get any Facebook account full control. Please see below. Facebook allows you to be your own phone number and the account number associated with it. This allows you via SMS to receive update...

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

Disallow multiple sessions for an account

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-33586. panel It is currently possible to run several sessions under any account. Some customers prefer to restrict the number of sessions to...

Disallow multiple sessions for an account

It is currently possible to run several sessions under any account. Some customers prefer to restrict the number of sessions to one, or limit the session to the IP it has been initiated from...

90% of pirated games are infected with Malware

If you've ever been tempted to download a 'hack' for your favorite game to accelerate your progress, or to download a pirated copy of the latest title through a torrent or file-sharing site, watch out ! Anti-virus company AVG has today warns that over 90% of hacked or cracked games downloaded via...

Social Engineering Skype Support team to hack any account instantly

You can install the industry’s strongest and most expensive firewall. You can educate employees about basic security procedures and the importance of choosing strong passwords. You can even lock-down the server room, but how do you protect a company from the threat of social engineering attacks?...

If your phone is lost, you feel the loss? - Vulnerability warning-the black bar safety net

Brief description: If your phone is lost, you feel lost? May you feel the phone itself out of nothing, the Address Book is important In the even young ignorance of the time...... Feel lost cell phone, QQ also lost However, in the even young ignorance, found...... Lost cell phone, perhaps want to...

Paypal Bug Bounty #18 - Blind SQL Injection Vulnerability

Document Title: =============== Paypal Bug Bounty 18 - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=673...

Twitter Resolves SMS Bug (For Some Users)

UPDATE–A day after an independant security researcher disclosed a vulnerability in SMS-enabled Twitter accounts, the social network giant announced it’s fixed the flaw – at least for some users. Those who use a “long code” and/or cannot use a PIN code remain at risk. The update came Tuesday eveni...

Twitter warning, Do not click DM saying "My profile was viewed..times..today"

A very quick and urgent warning for Twitter users, If you receive a direct message DM on Twitter saying "My profile was viewed..times..today" with a link then please don't click it. If you do, you will run the risk of having your Twitter account hijacked, your account turned into a spam-spewing...

Own the Email, Own the Person

For attackers looking to take control of a victim’s online presence, there is no better place to start than the target’s email account. If you own the email, you own the person. That’s never been more true than today, with so many social networks, services and shopping sites attached to users’...

A school/government CMS default background account password-loophole warning-the black bar safety net

Author:Exp1oITs Not a Oday Today went to zone-h submitted to the Black page, find foreign a hacking the Black page all the Chinese gov site. So see, a lot of government and school station there is this problem, should not back door. However, the government so do not mind let us Heavenly good...

Passwords are Dead, Long Live Passwords

Passwords as a defensive measure are complete rubbish. There’s no two ways about that. The fact that high-value services such as online banking, corporate email and data storage use simple passwords as the only real security mechanism is a sad commentary on the state of defensive technologies. Bu...

Student Suspected in University Hack That Leaked Info of 654K Cornhuskers

Officials at the University of Nebraska suspect a current undergraduate student is behind a hack earlier this month that appears to have spilled the sensitive information of tens of thousands of past and present students. According to a report from the Omaha World-Herald today, Police Chief Owen...

Most soil group purchase network to BYPASS the login background 0day-vulnerability warning-the black bar safety net

1: The 后台 地址 manage/login.php 2. Right-view the source code. Find the following code: divlabelfor="manage-login"login/labelinputtype="text"size="3 0"name="username"id="manage-username"datatype="require"require="true"//div 3. Which will be name="username" was changed to: name="username=0x7c or...