Distributed Denial Of Service (DDoS)

botkit is vulnerable to distributed denial of service DDoS attacks. These attacks are possible because it does not validate the X-HUB signature sent in the headers against the facebook app secret. This allows attackers to send arrays with a large amount of data in them to botkit and lock the...

Who viewed my Facebook - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Who viewed my Facebook published at the 'play' market has multiple vulnerabilities...

Mini For Facebook - Mini FB - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mini For Facebook - Mini FB published at the 'play' market has multiple vulnerabilities...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

PT-2014-7206 · Facebook · Facebook App +1

Name of the Vulnerable Software and Affected Versions: Facebook app version 14.0 Facebook Messenger app version 10.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME...

CVE-2014-6392: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

Facebook for Android - Information Diclosure Vulnerability

Title: Facebook for Android - Information Diclosure Vulnerability Affected Software: Facebook Application 1.8.1 for Android Confirmed on Android 2.2 Credit: Takeshi Terada Issue Status: v1.8.2 was released which fixes this vulnerability Overview: The LoginActivity of Facebook app has improper...

Android Mobile 2.6.xxx Dos Vulnerability & Facebook App Crash Poc

Exploit for hardware platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Facebook profiles can be hijacked by Chrome extensions malware

Facebook profiles can be hijacked by Chrome extensions malware Cybercriminals are uploading malicious Chrome browser extensions to the official Chrome Web Store and use them to hijack Facebook accounts, according to security researchers from Kaspersky Lab. The rogue extensions are advertised on...

Facebook New Year Scraps - SQL Injection Vulnerability

Document Title: =============== Facebook New Year Scraps - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=274 Release Date: ============= 2011-10-27 Vulnerability Laboratory ID VL-ID: ==================================== 274...

iPad Finally Has a Facebook Application

iPad Finally Has a Facebook Application Facebook has just released its official iPad app. The tablet device was unveiled in January 2010, but development and negotiations with Apple stalled the release of Facebook's app until now. Facebook for iPad is now available in App Store. We've been waitin...

e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2

Tested on iPhone firmware version 3.1.2 Facebook App version 3.1.2 Impact It is possible to usurp valid session IDs in order to gain unauthorised access to facebook profiles. At greatest risk are those handset that have been jailbroken. Description Using known vulnerabilities and exploits to gain...

Facebook for iPhone persistent XSS DOS

Exploit for unknown platform in category dos / poc ====================================== Facebook for iPhone persistent XSS DOS ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...