Facebook Linkshim Bypass Vulnerability

This Bypasses the l.php in facebook and granting you full control to send links in your victims without the captcha. It will also be masked by on.fb.me Speaking of Bypass it does not redirect the victim to the warning page. Usage Info You just need some fast moves to create this exploit before it...

Vimeo: unvalid open authentication with facebook

Hi, vimeo site is using facebook for open authentication . The authentication url is in this way https://www.facebook.com/dialog/oauth?clientid=19884028963&redirecturi=https://vimeo.com/facebook/join?ssl=0&iframe=0&popup=0&player=0&productid=0&scope=email,basicinfo,readstream,publishactions&state...

Facebook Mobile Parameter Tampering Bypass

Document Title: =============== Facebook Bug Bounty 19 - Filter Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1381 Facebook Security ID: 221374210 Vulnerability Magazine:...

Instagram Patches flaw that Makes Private Photos Visible

Your Instagram is not as Private as You Think. Millions of private Instagram photos may have been exposed publicly on the web until the company patched a privacy hole this weekend. Instagram team was unaware of a security vulnerability from long time which allowed anyone with access to an image’s...

Facebook Bug Bounty #19 - Filter Bypass Vulnerability

Document Title: =============== Facebook Bug Bounty 19 - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1381 Facebook Security ID: 221374210 Vulnerability Magazine:...

DLA-134-1 curl - security update

Bulletin has no description...

Facebook Bug Bounty #19 - Filter Bypass Vulnerability

Document Title: =============== Facebook Bug Bounty 19 - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1381 Facebook Security ID: 221374210 Vulnerability Magazine:...

Facebook Open Redirect

Facebook Old Generated URLs Still Vulnerable to Open Redirect Attacks & A New Open Redirect Security Vulnerability Domain: http://www.facebook.com Discover: Wang Jing, School of Physical and Mathematical Sciences SPMS, Nanyang Technological University NTU, Singapore...

DSA-3122-1 curl - security update

Bulletin has no description...

WordPress Plugin Facebook Like Box (cardoza-facebook-like-box) Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress plugin Facebook Like Box cardoza-facebook-like-box versions...

CVE-2014-9524

Multiple cross-site request forgery CSRF vulnerabilities in the Facebook Like Box cardoza-facebook-like-box plugin before 2.8.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Facebook Like Box cardoza-facebook-like-box plugin before 2.8.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct...

CVE-2014-9524

Multiple cross-site request forgery CSRF vulnerabilities in the Facebook Like Box cardoza-facebook-like-box plugin before 2.8.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct...

CVE-2014-9524

The CVE-2014-9524 entry concerns the WordPress plugin Cardoza Facebook Like Box (formerly cardoza-facebook-like-box) before version 2.8.3. The vulnerability set comprises multiple CSRF flaws that allow remote attackers to hijack an administrator’s authenticated session and perform actions such as...

WordPress Facebook Like Box Plugin <= 2.8.2 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution Update the plugin...

Facebook HipHop Virtual Machine Expected Access Restriction Bypass Vulnerability

Facebook HipHop Virtual Machine is a HipHop virtual machine developed by Facebook Inc. that significantly improves PHP performance for loading dynamic pages. Facebook HipHop Virtual Machine versions prior to 3.1.0 suffer from an Expected Access Restriction Bypass vulnerability that allows remote...

Facebook HipHop Virtual Machine CRLF Injection Vulnerability

Facebook HipHop Virtual Machine is a HipHop virtual machine developed by Facebook Inc. that significantly improves PHP performance for loading dynamic pages. A CRLF injection vulnerability exists in versions of Facebook HipHop Virtual Machine prior to 2.4.2, which allows remote attackers to execu...

Facebook HipHop Virtual Machine Information Disclosure Vulnerability

Facebook HipHop Virtual Machine is a HipHop virtual machine developed by Facebook Inc. that significantly improves PHP performance for loading dynamic pages. An information disclosure vulnerability exists in versions of Facebook HipHop Virtual Machine prior to 3.3.0, which allows remote attackers...

Facebook HipHop Virtual Machine crypgraphic protection mechanism bypass vulnerability

Facebook HipHop Virtual Machine is a HipHop virtual machine developed by Facebook Inc. that significantly improves PHP performance for loading dynamic pages. A crypgraphic protection mechanism bypass vulnerability exists in Facebook HipHop Virtual Machine versions prior to 3.3.0. The vulnerabilit...

Facebook Careers Page XXE Vulnerability Patched

A vulnerability was discovered and patched in a third-party service that handles resumes on Facebook’s careers page. The discovery was worth more than $6,000 in a bounty paid out by Facebook to researcher Mohamed Ramadan of Egypt, who published some details of the vulnerability and exploit on his...