Facebook Hacking, technique to Spoof the content of any Facebook App

There are many unpatched loopholes or flaws in Facebook website, that allow hackers to inject external links or images to a wall, hijacking any facebook account or bypassing your social privacy. Today we are going to report about another unfixed facebook app vulnerability that allow a hacker to...

Malicious Firefox, Chrome Extensions Target Facebook Users

Facebook users are being warned of malicious Firefox and Chrome extensions that can give an attacker remote control over a Facebook profile. Microsoft has seen an increase in activity around these extensions, in particular in Brazil. The threat is detected as Trojan:JS/Febipos.A and has been...

CVE-2013-2703

Cross-site request forgery CSRF vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

CVE-2013-2703

The CVE-2013-2703 entry affects the Facebook Members WordPress plugin prior to version 5.0.5. It is a CSRF flaw that allows remote attackers to hijack the administrator’s authenticated session and perform requests that modify the plugin’s settings. The issue originates from requests that can alte...

CVE-2013-2703

Cross-site request forgery CSRF vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

Hacking Instagram Accounts using OAuth vulnerability

'Nir Goldshlager' known as Facebook hacker and founder of Break Security , who reported many critical bugs in Facebook OAuth mechanism in past few months, today disclose a critical vulnerability in Instagram Oauth that allow an attacker to hack any account. Succesful hack allows attacker to acces...

Hacking Instagram Accounts using OAuth vulnerability

'Nir Goldshlager' known as Facebook hacker and founder of Break Security , who reported many critical bugs in Facebook OAuth mechanism in past few months, today disclose a critical vulnerability in Instagram Oauth that allow an attacker to hack any account. Succesful hack allows attacker to acces...

Easy Icon Maker 5.01 - Crash (PoC)

Easy Icon Maker 5.01 - Crash PoC Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...

Easy Icon Maker 5.01 - Crash (PoC)

Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction : ----------------- Easy icon maker is sufferi...

Google bans Facebook and other self updating Android apps

Google just released a new Play Store version 4.0.27 that, contains only very minor tweaks and Google has changed the rules of its Google Play Store to put an end to the practice of developers updating their apps through their own means rather than the official Google Play channel. Shortly before...

Customized Zeus Trojan Crimeware Marketed Over Facebook

The secrecy of underground forums where financial malware and crimeware kits are traded is well guarded, to the point that few are able to penetrate them without some kind of internal sponsor. Here, criminals value their privacy as much as those from whom they steal. That’s what makes a recent...

Windows7 Disable Task Manager Shellcode - 326 chars

/------------------------------------------------ == By Ayrbyte ====== Geng Simbe @ TKJ 1 Club ======================================== Greets To : Adit Groundd SAndd Notte, Agos Wahyo, Aguenkk Rebel Black Sweet, Ahmad Bagoes, Alvin Putra Marcdyto, Arieb Shezhaniea, Aviep Autiez, Chusnie Mubarok,...

Windows7 Force Shutdown Shellcode - 215 chars

/------------------------------------------------ == By Ayrbyte ====== Geng Simbe @ TKJ 1 Club ======================================== Greets To : Adit Groundd SAndd Notte, Agos Wahyo, Aguenkk Rebel Black Sweet, Ahmad Bagoes, Alvin Putra Marcdyto, Arieb Shezhaniea, Aviep Autiez, Chusnie Mubarok,...

Hacking Facebook users just from chat box using multiple vulnerabilities

Nir Goldshlager, Founder/CEO at Break Security known for finding serious flaws in Facebook once again on The Hacker News for sharing his new finding i.e Stored Cross-site Scripting XSS in Facebook Chat, Check In and Facebook Messenger. Stored Cross-site Scripting XSS is the most dangerous type of...

Another way to hack Facebook accounts using OAuth vulnerability

In recent few months White hat Hacker ,'Nir Goldshlager' reported many critical bugs in Facebook OAuth mechanism, that allowed an attacker to hijack any Facebook account without user's interaction. Another hacker, 'Amine Cherrai' reported a new Facebook OAuth flaw, whose exploitation is actually...

Hacking Facebook users just from chat box using multiple vulnerabilities

Nir Goldshlager, Founder/CEO at Break Security known for finding serious flaws in Facebook once again on The Hacker News for sharing his new finding i.e Stored Cross-site Scripting XSS in Facebook Chat, Check In and Facebook Messenger. Stored Cross-site Scripting XSS is the most dangerous type of...

Another way to hack Facebook accounts using OAuth vulnerability

In recent few months White hat Hacker ,'Nir Goldshlager' reported many critical bugs in Facebook OAuth mechanism, that allowed an attacker to hijack any Facebook account without user's interaction. Another hacker, 'Amine Cherrai' reported a new Facebook OAuth flaw, whose exploitation is actually...

Microsoft Reportedly Adding Two-Factor Authentication to User Accounts

Microsoft reportedly will implement two-factor authentication on users’ accounts at some point down the line, according to reports this week. Microsoft fansite Liveside.net first reported about the company’s plans yesterday with a blog post that includes a handful of screenshots from the purporte...

Skype, Dropbox Patch Critical Facebook Authentication Bugs

UPDATE Popular applications Skype and Dropbox fixed holes in their websites this week that could have allowed an attacker to gain control of users’ Facebook accounts. In what’s technically being referred to as an “open direct vulnerability,” both applications failed to validate sites before sendi...