FS Facebook Clone - token SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FS Facebook Clone - 'token' SQL Injection Date: 2017-12-06 Exploit Author: Dan° Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/facebook-clone/ Version: 2017-12-06 Tested on: Kali...

Another Facebook Bug Allowed Anyone to Delete Your Photos

If you think a website whose value is more than $500 billion does not have any vulnerability in it, then you are wrong. Pouya Darabi, an Iranian web developer, discovered and reported a critical yet straightforward vulnerability in Facebook earlier this month that could have allowed anyone to...

10 tips for safe online shopping on Cyber Monday

Shoppers familiar with the Cyber Monday circus know they’re stepping into the lion’s den. The Internet has always been a lawless place, but it becomes particularly rough during the holiday shopping season. In preparation for the frenzy, cyber villains have crafted a virtual onslaught of social...

Facebook Fingerprinting Photos to Prevent Revenge Porn

This is a pilot project in Australia: Individuals who have shared intimate, nude or sexual images with partners and are worried that the partner or ex-partner might distribute them without their consent can use Messenger to send the images to be "hashed." This means that the company converts the...

Facebook and Instagram Suffer Worldwide Outage

By Carolina Social media giants Facebook and Instagram suffered a brief service outage in This is a post from HackRead.com Read the original post: Facebook and Instagram Suffer Worldwide Outage...

Send Your Nude Pics to Facebook to Prevent Revenge Porn

By Carolina Revenge porn is quite easy to spread on social media, This is a post from HackRead.com Read the original post: Send Your Nude Pics to Facebook to Prevent Revenge Porn...

User claims Facebook employees went through his file sent in private chat

By Waqas It is a well-known fact that Facebook, the social media This is a post from HackRead.com Read the original post: User claims Facebook employees went through his file sent in private chat...

WhatsApp 2.17.52 - Memory Corruption Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...

WhatsApp 2.17.52 Memory Corruption

!/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on: iPhone 5/6s iOS 10.3.3 and 11 Description:...

Wait, Do You Really Think That’s A YouTube URL? Spoofing Links On Facebook

While scrolling on Facebook how you decide which link/article should be clicked or opened? Facebook timeline and Messenger display title, description, thumbnail image and URL of every shared-link, and this information are enough to decide if the content is of your interest or not. Since Facebook ...

Gratipay: Bypassing X-frame options

bypass X-Frame-Options Proxy protection NOT used DomainUsing: gratipay.com Proxy protection NOT used , i can bypass X-Frame-Options header and recreate clickjacking on the whole domain. I see that you don't have a reverse proxy protection this allows all users to proxy your website rather than...

Razer US: Customer's e-mail disclosure

It was found that sharing saved cart to Facebook leaks the user e-mail, thus the audience can retrieve it from the link. We appreciate the contribution by @gdinar in helping keep Razer's online properties secure...

X (Formerly Twitter): Open Redirect Protection Bypass

Hi Report 281538 is fixed but Attacker can Bypass this Open Redirect Protection. Give this link https://twitter.com/teams/authorize?targetscreenname=&authorizecallback=//www.facebook.com to authorized victim.Twitter will say him to authorize a different account for create team.After authorization...

omniauth-facebook Cross-Site Request Forgery vulnerability

The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery CSRF attacks via the state parameter...

GHSA-CF36-985G-V73C omniauth-facebook Cross-Site Request Forgery vulnerability

The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery CSRF attacks via the state parameter...

Scam Alert: Your Trusted Friends Can Hack Your Facebook Account

If you receive a message from any of your Facebook Friends asking for urgent help to recover their Facebook account, since they've added you as one of their 'Trusted Contacts'—just don’t blindly believe it. Researchers have detected a new Facebook phishing scam that can even trick an experienced...

Pundits Say Attackers Redefining Objectives, Approaches

BOSTON—The nature of cyberattacks is changing and increasingly leveraging social media as they take aim at new targets. That’s the consensus of cybersecurity experts discussing the evolving nature of threats from nation states to hackers for hire. That’s not to say ransomware isn’t going anywhere...

Facebook will use facial recognition to unlock your account

By Carolina Facebook is known for tracking users even when they log This is a post from HackRead.com Read the original post: Facebook will use facial recognition to unlock your account...

canvaschamp.com XSS vulnerability

Vulnerable URL: https://www.canvaschamp.com/facebook.php?title=this%20is%20custom%20title=Custom%20Descriptionℑ=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:|...

China Bans WhatsApp Messenger

Popular instant messaging app WhatsApp has already been struggling for its existence in China ever since July when Chinese government blocked its users from sending photos and videos over the app. Now, it appears that China has largely blocked Facebook-owned WhatsApp in its latest step to tighten...