CVE-2018-20682

Fork CMS 5.0.6 is affected by a stored XSS in the private/en/settings facebook_admin_ids input (Admin ids). The root cause is unsanitized/unencoded input rendered to users, enabling arbitrary script execution in stored form. Exploitation status is not detailed in the provided documents. Multiple ...

PT-2019-10162

Name of the Vulnerable Software and Affected Versions: Fork CMS version 5.0.6 Description: The issue allows stored XSS via the "Admin ids" input in the Facebook section, specifically through the facebook admin ids parameter in the private/en/settings endpoint. Recommendations: For Fork CMS versio...

CVE-2018-20682: Improper Neutralization of Input During Web Page Generation

Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebookadminids parameter aka "Admin ids" input in the Facebook section...

Facebook Proxygen has an unspecified vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . An unspecified vulnerability exists in Facebook Proxygen. An attacker could exploit this vulnerability to cause a denial of service...

Facebook HHVM has an unspecified vulnerability

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A security vulnerability exists in Facebook HHVM versions 3.25.1 and earlier, 3.24.5 and earlier, and 3.21.9 and earlier. Detailed vulnerability...

Facebook HHVM Denial of Service Vulnerability (CNVD-2019-37157)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A security vulnerability exists in Facebook HHVM versions 3.25.2 and earlier, 3.24.6 and earlier, and 3.21.10 and earlier, which stems from...

Fedora 28 : mozilla-privacy-badger (2018-bb965553f9)

Fixed security issues with HTML5 local storage tracking detection as well as SoundCloud widget replacement. Thanks again to Cure53 for discovering and reporting these vulnerabilities. - Improved Facebook link unwrapping; now enabled on the Facebook Onion domain - Improved translations Italian,...

Facebook HHVM Buffer Overflow Vulnerability

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A stack out-of-bounds read vulnerability exists in the 'Memcache::getextendedstats' function in Facebook HHVM versions 3.30 and earlier and 3.27...

Proxygen Denial of Service Vulnerability

Facebook Proxygen is an open source C++ HTTP library from Facebook Inc. HTTP2 Parser is one of the HTTP2 Hypertext Transfer Protocol 2.0 parser. A security vulnerability exists in the handling of headers/trailers by HTTP2 Parser in versions prior to Facebook Proxygen 2018.12.31.00. An attacker...

Proxygen Denial of Service Vulnerability (CNVD-2019-00956)

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in the handling of invalid HTTP2 priority settings in Facebook Proxygen versions prior to 2018.12.31.00. An attacker can exploit this vulnerability to cause a denial...

The Worst Hacks of 2018: Marriott, Atlanta, Quora, and More

From the Marriott and Facebook meltdowns to state-sponsored assaults, 2018 was an eventful year for cybercrime...

PT-2018-17493 · Facebook · Proxygen

Name of the Vulnerable Software and Affected Versions: Proxygen versions prior to 2018.12.31.00 Description: A potential denial-of-service issue exists due to the handling of invalid HTTP2 priority settings, specifically a circular dependency, in Proxygen. Recommendations: For versions prior to...

How Facebook Tracks Non-Users via Android Apps

LEIPZIG, GERMANY – If you quit Facebook or never joined because of its data collecting practices the odds are good the social network is still tracking you – despite your protest. Facebook collects data of non-users of its social network via dozens of mainstream Android apps that send tracking an...

facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-714979 Description| Value ---|--- Affected Website:| facebook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

Why it’s Time to Switch from Facebook Login to a Password Manager

Social media sites are increasingly the focus of our digital lives. Not only do we share, interact and post on platforms like Facebook —we also use these sites to quickly log into our favorite apps and websites. But what happens when these social media gatekeepers are hacked? Awhile back, Faceboo...

Christmas tech scams roundup

There’s a fair few Christmas tech scams floating around out there as 2018 winds up, and we thought it’d be a good time to warn you about them. It’s the usual mish-mash of phone antics, social media shenanigans, and click bait. Shall we begin? This scam looks divine BOOM reports on a collection of...

Facebook Admits Giving Partners Access to Messages

UPDATE Facebook has admitted that it dealt several messaging partnerships with tech giants, giving them read, write and delete access for Facebook messages. The confirmation comes on the heels of a bombshell New York Times article, Tuesday, which leveraged internal documents to show that Facebook...

Facebook’s Rough History of Failed User Revolts

Outraged over the latest Facebook privacy flap, half of users polled Tuesday promise to un-friend the social network. We have heard this refrain before. It seems almost weekly now some new dirt about the social media giant’s misuse of consumer data is revealed. Recently, there was the collection ...

Facebook gave Amazon, Netflix, Spotify & others access to private user data

By Waqas Facebook allowed Netflix, Spotify, Amazon, Microsoft, Yandex and Royal Bank of Canada unprecedented access to its users' private data. The social media giant Facebook has been making headlines for all the wrong reasons lately. Now, according to reports, Facebook allowed video streaming...

Threatpost Poll: Do You Hate Facebook?

Facebook is under fire again after a bombshell report went live, claiming it has had broad data-sharing arrangements with Amazon, Apple, Netflix and others for years. We’re wondering if this changes how you use Facebook in your everyday life. An exhaustive investigation in the New York Times on...