From the deserialization vulnerability to take control of the Empire: millions of dollars of Instagram vulnerability-vulnerability warning-the black bar safety net

2 0 1 2 years, Blloberg in the Facebook white hat reward program's website published a famous article, mentioned in the article:“if Facebook shows the value of millions of dollars of vulnerability,we also wishes to do a single full pay”in. In this article before you start, I want to cheat click...

Zendesk: Stored XSS on [your_zendesk].zendesk.com in Facebook Channel

I have found a stored XSS in the Facebook Channel options at https://yourzendesk.zendesk.com/agent/admin/facebook/facebookauth. The XSS is a result of improperly escaping Facebook Page names. Steps to reproduce ------------------------- 1. Create a facebook page with the following title/page name...

APITest.IO: Login Via FB Leads To Create A New Account Instead Of Loging In

Hy There So When A User For Example in my case sign up with email [email protected] And Confirm The Email Address So Then If I Logout And MAke sure that the account associated with [email protected] is logged in on facebook and on apitest.io when i click on sign in via FB it leads me to...

How Certificate Transparency Monitoring Tool Helped Facebook Early Detect Duplicate SSL Certs

Earlier this year, Facebook came across a bunch of duplicate SSL certificates for some of its own domains and revoked them immediately with the help of its own Certificate Transparency Monitoring Tool service. Digital certificates are the backbone of our secure Internet, which protects sensitive...

Facebook Lite - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Lite published at the 'play' market has multiple vulnerabilities...

Gratipay: After removing app from facebook app session not expiring.

When a user login with facebook 0Auth and then he removes the app from facebook app setting the session is not expiring. Poc:- Step1: Go to gratipay login page. Step2: Click on login with facebook 0 auth and login with facebook. Step3: Go to facebook then app setting. Step4: Now remove the gratip...

BREACH exploits from Gmail, Facebook, steal sensitive information-vulnerability warning-the black bar safety net

2 0 1 3 summer,two researchers found that the use of and continue to attack Gmail and Facebook chat sessions flow a new method,that is, BREACH exploits,and before that,such attacks never walk into people's line of sight. ! Late last week,the study in Singapore, the Asia black hat conference is...

Facebook Ads Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Ads Manager published at the 'play' market has multiple vulnerabilities...

Facebook Groups - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Groups published at the 'play' market has multiple vulnerabilities...

Facebook at Work - Customized SSL, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Facebook at Work published at the 'play' market has multiple vulnerabilities...

Web Crawler Access Detection - Facebook

Binary data 9180.prm...

Adobe to issue Emergency Patch for Critical Flash Player Vulnerability

Adobe has been one of the favorite picks of the Hackers to mess with any systems devoid of any operating systems, as Flash Player is a front runner in all the browsers. Hackers have already been targeting Flash Player for long by exploiting known vulnerabilities roaming in the wild. Despite Adobe...

Facebook uses Artificial Intelligence to Describe Photos to Blind Users

Today the Internet has become dominated by images, and it’s the major feature that got Facebook to a Billion daily users. We can not imagine Facebook without photos, but for Millions of blind and visually impaired people, Facebook without photos has been the reality since its launch. But not now!...

WhatsApp Adds End-to-End Encryption To One Billion Users

The world’s largest online communications company WhatsApp, with one billion users, announced Tuesday it added end-to-end encryption to its entire platform. The move is seen as a major win for security and privacy advocates. It also shifts the encryption spotlight away from Apple and its battle...

BREACH Revived to Steal Private Messages from Gmail, Facebook

The BREACH attack hasn’t been top of mind since the summer of 2013, but two researchers have found new ways to exploit and persistently attack traffic, including Gmail and Facebook chat sessions. The research was shared late last week in Singapore at Black Hat Asia where Dimitris Karakostas of th...

Data Leaking 'Surreptitious Sharing' Vulnerability Identified in Android API

Researchers have identified a vulnerability in an Android API used by messaging apps such as Skype and perhaps more concerning, privacy-centric apps such as Signal, and Telegram, that could lead to privilege escalation and data loss including private keys. Dominik Schürmann and Lars Wolf,...

Space Dog + | Facebook Game - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Space Dog + | Facebook Game published at the 'play' market has multiple vulnerabilities...

Lite Chat For Facebook - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lite Chat For Facebook published at the 'play' market has multiple vulnerabilities...

Puffin for Facebook - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Puffin for Facebook published at the 'play' market has multiple vulnerabilities...

Tinfoil for Facebook - Possible privilege escalation, Runtime command execution, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Tinfoil for Facebook published at the 'play' market has multiple vulnerabilities...