GreenBrowser 6.4.0515 - Heap Overflow

Exploit Title: Green Browser 6.4.0515 Heap Overflow Date: 31-08-2013 Exploit Author: The Black Devils "Asesino04" Vendor Homepage: http://www.morequick.com/indexen.htm Version: 6.4.0515 Tested on: Windows XP SP2 function overtrigger var objcol = document.getElementById"132"; objcol.width = "42765...

Vulnerability allowed hacker to Delete any Facebook Photo; Rewarded with $12,500 for reporting bug

Indian Security Enthusiast 'Arul Kumar' recently reported an interesting Facebook vulnerability that allowed him to delete any Facebook image within a minute. Facebook Bug Bounty program rewarded him with $12,500 USD for helping the Facebook Security team to patch this critical loophole in their...

Vulnerability allowed hacker to Delete any Facebook Photo; Rewarded with $12,500 for reporting bug

Indian Security Enthusiast 'Arul Kumar' recently reported an interesting Facebook vulnerability that allowed him to delete any Facebook image within a minute. Facebook Bug Bounty program rewarded him with $12,500 USD for helping the Facebook Security team to patch this critical loophole in their...

Facebook Malware Hijacks Users' Chrome Browsers

An attack on the world’s largest social network is drawing users to a third party site with fake tag notifications and prompting victims to download malware masquerading as a video-codec extension. The malware is reportedly capable of hijacking the Facebook accounts and Chrome Web browsers of...

Dennis Fisher and Mike Mimoso Discuss the NYT Attack, News of the Week

Dennis Fisher and Mike Mimoso discuss the big stories of the last couple of weeks, including the Syrian Electronic Army’s attacks against the registrar for the New York Times and Twitter, and the release of Facebook’s first transparency report. Download: digitalunderground124 Subscribe to the...

Facebook Complied with 79 Percent of Requests for User Data

Facebook, a holdout among major technology companies in divulging figures on the numbers of government requests for its users’ data, today delivered its first semblance of a transparency report. The Global Government Requests Report quantifies the number of data requests against how many accounts...

With No Facebook Bug Bounty In Sight, Researcher Gets $12k Reward From Security Community

Like most major Web and software companies, Facebook receives a lot of bug reports. And since the company started its bug bounty program, security researchers have become even more interested in looking for vulnerabilities in the Facebook ecosystem. But, as one researcher learned recently, not al...

Palestinian hacker, who hacked Zuckerberg's Facebook account to be rewarded with $12,000

The Palestinian hacker 'Khalil Shreateh', who broke into the Mark Zuckerberg's Facebook Timeline to expose a security lapse will be awarded nearly $12,000 but not from Facebook, it will come from an online crowdsourced campaign. The hacker initially used Facebook's whitehat disclosure program, a...

Facebook Send Messages From Anyone 0day

This Exploit allowed you to send messages from any person to any one on facebook. Оld vulnerabilities shows a yellow triangle after receiving the message. User notices that something was wrong, way is DETECTED by facebook. This exploit goes unnoticed. YELLOW TRIANGLE is not present, the user is...

Palestinian hacker, who hacked Zuckerberg’s Facebook account to be rewarded with $12,000

The Palestinian hacker 'Khalil Shreateh', who broke into the Mark Zuckerberg's Facebook Timeline to expose a security lapse will be awarded nearly $12,000 but not from Facebook, it will come from an online crowdsourced campaign. The hacker initially used Facebook's whitehat disclosure program, a...

Facebook Stands By Bug Disclosure Policy, Patches Wall Bug

A member of Facebook’s security team acknowledged over the weekend that the group could have taken further steps to verify a vulnerability initially brought to their attention by an independent security researcher last week but that the company largely adhered to its bug disclosure policy. That...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg's Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg’s Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

Facebook Friends Disclosure

Blog post link : http://techielogic.wordpress.com/2013/08/04/facebooks-friends-list-disclosure-vulnerability/ Affected application: facebook.com Impact: Access to friends list, by bypassing the privacy settings Author: Bhavesh Naik It was JULY 17, 2013 when I discovered this little loophole and I...

Vulnerability found in Apple's iOS can hide malicious code inside apps

A Georgia Tech researcher has found a weakness in Apple’s iOS mobile platform that could let hackers to hide malicious code inside apps and can be surreptitiously planted on the Apple App Store. Researchers team created a proof-of-concept attack that was published in the Apple App Store and used ...

NSA's #XKeyscore program could read Facebook Chats And Private Messages

According to a new report revealed by NSA leaker Edward Snowden, The National Security Agency has a secret program that allows it to see just about everything a person does on the Internet. An NSA tool called DNI Presenter, used to read the content of stored emails, also enables an analyst using...

NSA’s #XKeyscore program could read Facebook Chats And Private Messages

According to a new report revealed by NSA leaker Edward Snowden, The National Security Agency has a secret program that allows it to see just about everything a person does on the Internet. An NSA tool called DNI Presenter, used to read the content of stored emails, also enables an analyst using...

Facebook Bug Bounty - Canvas & Web URL Filter Bypass

Document Title: =============== Facebook Bug Bounty - Canvas & Web URL Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1036 View: http://www.youtube.com/watch?v=Pw24BsLHYk Release Date: ============= 2013-07-28 Vulnerability Laboratory ID VL-ID:...