CVE-2011-3614

An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9...

CVE-2011-3614

CVE-2011-3614 affects Vanilla Forums (Facebook, Twitter, and Embedded plugins) prior to version 2.0.17.9. The issue is an Access Control vulnerability that could impact confidentiality, integrity, and availability. Remediation: upgrade to Vanilla Forums 2.0.17.9 or newer; apply any vendor-supplie...

PT-2020-7125

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.9 Description An Access Control issue exists in the Facebook, Twitter, and Embedded plugins. Recommendations For versions prior to 2.0.17.9, update to version 2.0.17.9 or later to resolve the issue...

CVE-2011-3614: Undefined Security Weakness

An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9...

All the Ways Facebook Tracks You—and How to Limit It

If you have a Facebook account—and even if you don't—the company is going to collect data about you. But you can at least control how it gets used...

A Facebook Bug Exposed Anonymous Admins of Pages

A bad code update allowed anyone to easily reveal which accounts posted to Facebook Pages—including celebrities and politicians—for several hours...

Facebook Says Encrypting Messenger by Default Will Take Years

Mark Zuckerberg promised default end-to-end encryption throughout Facebook's platforms. Nearly a year later, Messenger's not even close...

Facebook Cracks Down on Deepfake Videos

Facebook is banning deepfake videos, which stem from a technique of human-image synthesis based on artificial intelligence AI to create fake content. Over the past year, security experts and lawmakers have voiced concerns about malicious deepfake applications, particularly as a vessel for...

Facebook Revamps Its Privacy Checkup Feature in Time for CES

Forget Portal. This year, Facebook is marketing itself as a privacy crusader...

Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://intelliants.com/ Software Link : https://github.com/intelliants/subrion/releases/tag/v4.0.5 Software : Subrion CMS...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. ' /...

Cambridge Analytica scandal: Facebook hit with $1.6 million fine

By Waqas Brazilian Government is not happy with Facebook over the Cambridge Analytica breach. This is a post from HackRead.com Read the original post: Cambridge Analytica scandal: Facebook hit with $1.6 million fine...

Facebook Security Debacles: 2019 Year in Review

Facebook Security: 2019 Year in Review Facebook spent the past year both trying to deal with the consequences of the Cambridge Analytica scandal that rocked its public relations in 2018, as well as other issues afflicting the social media platform – from data security challenges to political...

Top 10 Breaches and Leaky Server Screw Ups of 2019

Top 10 Breaches and Leaky Server Screw Ups of 2019 From massive credential spills on the Dark Web and hacked data to card-skimming and rich profiles exposed by way of cloud misconfigurations, 2019 was a notable year for data breaches. Big names like Capital One, Macy’s and Sprint were impacted, a...

Facebook Finally Fixes Its Two-Factor Mess

A Wawa breach, Russian spies, and more of the week's top security news...

Findomain v0.9.3 - The Fastest And Cross-Platform Subdomain Enumerator

The fastest and cross-platform subdomain enumerator. What Findomain can do? It table gives you a idea why you should use findomain and what it can do for you. The domain used for the test was aol.com in the following BlackArch virtual machine: Host: KVM/QEMU Standard PC i440FX + PIIX, 1996...

Names & Phone numbers of 267 million Facebook users exposed

By Waqas Another day, another data breach putting the privacy of hundreds of millions of Facebook users at risk. This is a post from HackRead.com Read the original post: Names & Phone numbers of 267 million Facebook users exposed...

267M Facebook Users’ Phone Numbers Exposed Online

A database exposing the names, phone numbers and Facebook user IDs of millions of platform users was left unsecured on the web for nearly two weeks before it was removed. Security researcher Bob Diachenko, who along with Comparitech discovered the unsecured Elasticsearch database, believe it...

2019: The year in malware

By Jon Munshaw. From ransomware attacks to DNS deception, attackers were just as active as ever in 2019. This year saw a number of big-name malware families come onto the scene, including Sea Turtle, one of the most high-profile DNS hijacking attempts in recent memory. BlueKeep also stirred up...

Stolen: Unencrypted hard drives with data of 29,000 Facebook employees

By Waqas A thief stole unencrypted hard drives with sensitive data of 29,000 Facebook employees. Here's what happened what data was in there: This is a post from HackRead.com Read the original post: Stolen: Unencrypted hard drives with data of 29,000 Facebook employees...