Top Websites Using Audio Fingerprinting to Secretly Track Web Users

Despite browsing incognito, blocking advertisements, or hiding your tracks, some websites monitor and track your every move online using a new web-tracking technique called Audio Fingerprinting. This new fingerprinting technique can be utilized by technology and marketing companies to deliver...

Instagram Patches Brute-Force Authentication Flaws

Facebook on Thursday patched a pair of vulnerabilities that enabled brute-force attacks against Instagram passwords, and also hardened its password policy. Researcher Arne Swinnen privately disclosed the flaws in December and in February respectively. One bug was patched in February, while the...

Facebook Sued for illegally Scanning Users' Private Messages

Facebook is in trouble once again regarding its users' privacy. Facebook is facing a class-action lawsuit in Northern California over allegations that the company systematically scans its users' private messages on the social network without their consent and makes the profit by sharing the data...

Facebook Messenger (iOS) Certificate Validation Vulnerability

Facebook is a social networking site. Facebook has a certificate validation vulnerability that allows an attacker to exploit the vulnerability to cause a MITM attack...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

Facebook CTF: Capture the Flag Platform

The Facebook CTF is a platform to host Jeopardy and “King of the Hill” style Capture the Flag competitions. Due to the high cost and technical requirements of building and running CTF environments, few publicly available resources exist for schools, students, and non-profit organizations to use...

Facebook Capture The Flag Platform Open Source

If you’ve been to DEF CON or any number of other technical hacker conferences, you’re familiar with Capture the Flag contests. These events pit teams of hackers and researchers against each other in a series of challenges until a winner is determined. Capture the Flag is also a valuable teaching...

Facebook Open Sources its Capture the Flag (CTF) Platform

Hacking into computer, networks and websites could easily land you in jail. But what if you could freely test and practice your hacking skills in a legally safe environment? Facebook just open-sourced its Capture The Flag CTF platform to encourage students as well as developers to learn about cyb...

WhatsApp launches Desktop Software for Windows and Mac Users

The most popular messaging app WhatsApp now has a fully functional desktop app – both for Mac as well as Windows platform. Facebook-owned WhatsApp messaging software has been a mobile-only messaging platform forever, but from Tuesday, the company is offering you its desktop application for both...

MediaInfo 0.7.61 - Crash (PoC)

!/usr/bin/perl -w Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit Tested on Windows 7 / Server 2008 Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/ Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp...

MediaInfo 0.7.61 - Crash (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/perl -w Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit Tested on Windows 7 / Server 2008 Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/ Author : Mohammad Reza...

This 10-year-old Boy becomes the youngest Bug Bounty Hacker

"Talent has no Age Limit" That’s what I said for a 10-year-old Finnish boy on our official Facebook page while sharing his recent achievement with our readers i.e. Winning $10,000 bug bounty from Instagram. Last Tuesday when we at The Hacker News first acknowledged this talented boy and the flaw ...

10-Year-Old Instagram Bug Hunter Earns $10,000

A 10-year-old boy from Finland earned $10,000 after discovering an API bug that allowed him to erase Instagram comments from any account. Facebook confirmed to Threatpost the boy, who goes by the name “Jani”, discovered the bug in late February and received the payout in early March from Facebook...

Brazilian Judge Overturns 72-Hour WhatsApp Suspension

Following an appeal from WhatsApp’s lawyers, on Tuesday afternoon a Brazilian judge overturned a suspension previously handed down this week that would’ve blocked usage of the messaging app for 72 hours. According to Reuters, on Tuesday afternoon a “different judge from the state tribunal...

Brazil blocks WhatsApp for 72-Hours — Here's Why

In Brief For the second time in past five months, a Brazil court ordered local telecommunications companies to block the popular messaging app WhatsApp for 72 hours, afterFacebook-owned WhatsApp company refused to hand over information requested in a drug trafficking investigation. The WhatsApp's...

One Million Access Facebook Over Tor

Accessing Facebook over Tor may seem to be a contradiction, but apparently that’s not the case for a million or so users of the anonymity service. Facebook on Friday said that in April, for the first time, there were more than one million people accessing Facebook over Tor in a 30-day period. As ...

Hacker Installed a Secret Backdoor On Facebook Server to Steal Passwords

How to Hack Facebook? That’s the most commonly asked question during this decade. It’s a hacker dream to hack Facebook website for earning bug bounty or for any malicious purpose. Facebook security team recently found that someone, probably a blackhat hacker with malicious intent, has breached in...

More than 1 million People now access Facebook Over Tor Network

In Brief Facebook has hit another Milestone: More than 1 MILLION people, or you can say privacy conscious, are accessing Facebook over TOR. Facebook proudly announced today that, this month, for the first time, the people connected to the anonymous version of Facebook that's accessible only throu...

WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress plugin LeenkMe version 2.5.0. The plugin can be found at https://wordpress.org/plugins/leenkme/ In the page wp-content/plugins/leenkme/facebook.php XSS vulnerable Fields are : - facebookmessage - facebooklinkname -...

WordPress leenk.me 2.5.0 Plugin - Cross-Site Request Forgery / Cross-Site Scripting

Exploit for php platform in category web applications I would like to disclose CSRF and stored XSS vulnerability in Wordpress plugin LeenkMe version 2.5.0. The plugin can be found at https://wordpress.org/plugins/leenkme/ In the page wp-content/plugins/leenkme/facebook.php XSS vulnerable Fields a...