BSNL telecom server hacked by Anonymous Group against Section 66A of IT Act

The Homepage of BSNL Bharat Sanchar Nigam Limited https://www.bsnl.co.in/ was hacked today morning by hacking group Anonymous. BSNL is an Indian state-owned telecommunications company, the largest provider of fixed telephony and fourth largest mobile telephony provider in India, and is also a...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB Plugin 2.4 Facebook Profile Persistant XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Teste...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

Facebook Streamlines Privacy Controls in Latest Update

In what may be the least surprising news of the day, Facebook is again making changes to its privacy controls. The existing privacy controls, which we explored in depth in our How-To Video on the subject, are a bit convoluted. So it makes sense that product manager Samuel Lessin is rolling out so...

Facebook Helps FBI to shuts down Butterfly botnet theft $850 millions

The U.S. Department of Justice said on Tuesday that they've arrested 10 suspects from from Bosnia and Herzegovina, Croatia, Macedonia, New Zealand, Peru, the United Kingdom, and the United States involved in a global botnet operation that infected more than 11 million systems. The ring is said to...

Facebook Security, FBI Take Down Butterfly Botnet, Arrest 10

Facebook’s security team is being lauded by the FBI for its role the arrest of 10 individuals accused of spreading banking malware on the social networking site and collecting more than $850 million from fraudulent transactions. The arrests were carried out yesterday in the U.S., U.K., the Balkan...

Facebook Helps FBI to shuts down Butterfly botnet theft $850 millions

The U.S. Department of Justice said on Tuesday that they’ve arrested 10 suspects from from Bosnia and Herzegovina, Croatia, Macedonia, New Zealand, Peru, the United Kingdom, and the United States involved in a global botnet operation that infected more than 11 million systems. The ring is said to...

Wordpress Facebook Survey v1 - SQL Injection Vulnerability

Title: ====== Wordpress Facebook Survey v1 - SQL Injection Vulnerability Date: ===== 2012-11-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=766 VL-ID: ===== 766 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...

Twitter SMS-Spoofing Bug Allows Attackers to Send Tweets From Users' Accounts, Edit Profiles

There is a bug in the way that Twitter handles a feature that enables users to post messages via SMS and the researcher who discovered the bug says that it allows anyone who knows a user’s mobile number to not only tweet from the user’s account but also modify information in the user’s profile. T...

TRENDNET TEW-432BRP CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: TRENDNET TEW-432BRP CSRF Vulnerability Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com hardwarelink : N / A Date : 25/08/2012 Category : webapps Google dork: N / A Tested on: Windows & Ubuntu open tamber...

Marketing Development Script SQL Injection

Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo Analyzing ;...

Marketing Development Script SQL Injection Vulnerability

Marketing Development Script suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/...

Worm Tries AutoRun, Then Social Engineering to Infect

Sophos and TrendMicro, and anumber of other security firms, are reporting a dramatic increase in the prevalence of a worm using AutoRun and social engineering to proliferate. If you thought Microsoft solved the AutoRun problem, you aren’t alone. They tried to shut it down after it was famously an...

Fake Facebook Alert Emails Link to Black Hole Sites

Attackers are sending spoofed “pending notification” emails to Facebook users, claiming that the recipients overlooked some alert on the world’s largest social network, and providing them with a link that supposedly leads to the allegedly neglected content but which, in reality, funnels users to ...

Fedora 18 : firefox-17.0-1.fc18 / thunderbird-17.0-1.fc18 / thunderbird-enigmail-1.4.6-2.fc18 / etc (2012-18731)

First revision of the Social API and support for Facebook Messenger - Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission see blog post - Updated Awesome Bar experience with larger icons - JavaScript Maps and Sets are now...

Websense Proxy Filter Bypass

Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description Internet access management system...

Flame Malware against French Government

The news is sensational, according the French magazine L'Express the offices of France's former president Sarkozy were victim of a cyber attack, but what is even more remarkable is that for the offensive was used the famous malware Flame. On the origin of the malware still persist a mystery, many...

Facebook Proposes Eliminating User Voting System for Privacy Changes

Facebook today announced plans to eliminate its voting system that gave users a say in how their privacy is handled. In a statement issued Wednesday, Elliot Schrage, Vice President, Communications, Public Policy and Marketing for the Menlo Park, Calif.-based social media company, said the voting...