FTC Finalizes Facebook Settlement over Privacy

The U.S. Federal Trade Commission today announced it had finalized its settlement with Facebook, which is now subject to biennial privacy audits for the next 20 years and requires its nearly 1 billion users opt in to any future privacy policy changes. The settlement announcement follows news that...

Nike+ Panel / Mobile App Cross Site Scripting

Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

Alleged Anonymous hacker arrested for Facebook threat

Hong Kong police said Sunday they had arrested a 21-year-old man believed to be a member of the international hacker group Anonymous, after he reportedly said on social networking site Facebook that he would hack several government websites. "The Internet is not a virtual world of lawlessness," a...

Washington State to Register Voters via Facebook

Residents of Washington State will soon be able to access voter registration forms on the secretary of state’s official Facebook page, according to an Associated Press report. Voters will not be registering directly through Facebook, but rather using the social network to access voter registratio...

Malware Tied to Blackhole Exploit Kit Appears as Facebook Tag Alert

If you find some random person says they’ve tagged a Facebook photo with you, think twice before you investigate further. SophosLabs has discovered malware infecting machines by getting users to open a malicious link in a fake Facebook e-mail notification. Everything looks legit about the alert...

Kool Media Converter 2.7.0 Denial Of Service

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Gustavo Antunez SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Instagram Patches "Friendship Vulnerability" Privacy Hole

Instagram has patched a flaw in its photo sharing application that could have allowed anyone to add themselves as friends to accounts and view information and photos that were set to private. The vulnerability, discovered by Spanish security researcher Sebastián Guerrero, could have allowed an...

Joomla (makedown.php) Local File Inclusion/download

Exploit for php platform in category web applications Exploit Title: Joomla /Makedown.php Local File Inclusion/download Author: Th3 Bl4Ck H4Ck3R Facebook Page: http://www.fb.com/Mr.googl E-mail: email protected Category:: webapps !! File makedown.php ------------------------------...

IMCE Mkdir Shell Upload

Exploit Title: IMCE Mkdir == Remote File Upload Vulnerability Date: 27/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://drupal.org/project/imcemkdir Google dork: inurl:"/imce?dir=" intitle:"File Browser" Tested on:...

Facebook Viddy Application Detection (deprecated)

Binary data 6504.prm...

Facebook Viddy Video Application Detection (deprecated)

Binary data 6503.prm...

Facebook SocialCam Application Detection (deprecated)

Binary data 6501.prm...

BizShop - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: BizShop - SQL Injection Vulnerability Author: Dark-Puzzle Category : Webapps Vendor Homepage: http://bizshop.com/ Google Dork: inurl:videos.php?id intext:"Powered by BizShop Webmaster Service" Date: 24 June 2012 Vendor : BizShop...

Face.com Fixes Flaw to Prevent Facebook and Twitter Hijacks

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked. KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’...

Facebook Issues Security Updates for Mobile App

The Facebook security team is adding some new security features to the social network’s mobile applications, including upgrades to the login mechanism and account recovery options. The first addition is an update to Facebook’s existing login approval mechanism, which they are calling ‘code...

Facebook Security Team Warns Users About DNSChanger Malware

The security team at the world’s most populace social network over in Palo Alto, Calif., finally addressed the thorny issue of the DNSChanger malware to its users in a blog post on the Facebook Security page yesterday. To the uninitiated, DNSChanger started popping up in security headlines earlie...

The Pros and Cons of Letting the Kids Join Facebook

Following its $16 billion infusion from its recent IPO, the world’s largest social network is reportedly developing a technology that would allow children to access Facebook under parental supervision. A Facebook spokesperson neither confirmed nor denied that they are developing such technologies...

Facebook Cancellation Malware Disguised As Adobe Update Making Rounds

Users who receive e-mails that appear to come from Facebook asking if they’d like to cancel their accounts should beware that it’s more than likely an attempt to install malware on their computers. According to reports from ZDNet and Sophos, there’s been a rash of Facebook-centric e-mails making...