Facebook Releases osquery to Open Source

Facebook is in a giving mood today. The social networking giant announced today that it will release to open source a framework that detects and logs state changes in an operating system likely caused by an attack or performance meltdown. It also announced that it will hand out up to $300,000 nex...

Facebook Yahoo Require-Recipient-Valid-Since SMTP Extension

Yahoo’s decision in June 2013 to reset accounts that had been dormant for 12 months and make them available to other users raised a number of security and privacy red flags. It was feared that the potential for identity theft would grow given that if an old Yahoo account was linked to another...

Facebook Web Security Bug Bounty: Directory Traversal Vulnerability / RCE In Parse.com

--- http://parse.com directory traversal vulnerability| Little Insight: http://parse.com was vulnerable to a directory traversal / RCE vulnerability. As a result, it was possible for an attacker to load web server-readable files from the local filesystem. or Run commend on That Well this is my 4t...

CVE-2014-7376

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7376

CVE-2014-7376 concerns the Android app Facebook Profits on Steroids (com.wFacebookProfitsonSteroids) version 0.1, which fails to validate X.509 certificates when connecting to SSL servers. This weakens transport security by enabling MITM attackers to spoof servers and obtain sensitive information...

CVE-2014-7376

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Facebook to Double Bounty Payouts For Ad Code Bugs

Popular segments of Facebook code have plenty of white—and black hats—poking around for bugs. The same probably cannot be said for the social network’s ads code, so Facebook has decided to add an incentive to its bug bounty program. Through the end of the year, payments will be doubled for bugs...

Google Android Browser - Bypass& Persistent Vulnerability

Document Title: =============== Google Android Browser - Bypass& Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1337 View: https://www.youtube.com/watch?v=Erva1rfd3dc Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

Google Android Browser - Bypass& Persistent Vulnerability

Document Title: =============== Google Android Browser - Bypass& Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1337 View: https://www.youtube.com/watch?v=Erva1rfd3dc Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

The relevant departments repair. Instagram can be accessed vulnerability-vulnerability warning-the black bar safety net

Today the Facebook-owned photo-sharing service Instagram be blocked in social networking sites such as Sina Weibo, Instagram search is also shielded. As early as this year 7 month, Instagram application from the main domestic third-party Android stores disappear. It is not possible to determine...

'Facebook To Begin Charging Users $2.99 / Month' — Totally BULLSHIT!

Facebook going to charge users per month?? Nobody expected such a news story this week, but it seems that Facebook will No longer be a Free Service, according to reports claimed by the National Report, "Facebook To Begin Charging Users $2.99/mo Starting November 1st", which turns out fake. Thank...

FBHT v3.0 - Facebook Hacking Tool (Like flood, Note DDoS attack, FBFriendlyLogout, more...)

FBHTFacebook Hacking Tool is an open-source tool written in Python that exploits multiple vulnerabilities on the Facebook platform The tool provides: 1 Create accounts 2 Delete all accounts for a given user 3 Send friendship requests Test Accounts 4 Accept friendship requests Test Accounts 5...

CVE-2014-6637

The Facebook Facts aka com.wFacebookFacts application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6637

The Facebook Facts aka com.wFacebookFacts application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6637

The CVE-2014-6637 entry concerns the Facebook Facts (com.wFacebookFacts) Android app 0.1, which does not verify X.509 certificates when establishing TLS connections. This improper certificate validation enables man-in-the-middle attackers to spoof SSL servers and exfiltrate sensitive information ...

CVE-2014-5923

The Facebook Status Via aka com.StatusViaAdvanced application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Facebook Status Via aka com.StatusViaAdvanced application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5923

The Facebook Status Via aka com.StatusViaAdvanced application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5923

The CVE-2014-5923 entry concerns the Facebook Status Via (com.StatusViaAdvanced) Android app version 3.5, which does not verify X.509 certificates from SSL servers. The underlying flaw allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry...