Facebook Profile Sticker SQL Injection

Title: ====== Facebook Profile Sticker - SQL Injection Vulnerability Date: ===== 2012-02-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=409 VL-ID: ===== 409 Introduction: ============= The application is currently included and viewable by all facebook users. The...

Facebook Game Store SQL Injection

Title: ====== Facebook Game Store - SQL Injection Vulnerability Date: ===== 2012-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=408 VL-ID: ===== 408 Introduction: ============= The application is currently included and viewable by all facebook users. The service ...

Facebook Game Store - SQL Injection Vulnerability

Document Title: =============== Facebook Game Store - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=408 Release Date: ============= 2012-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 408 Produ...

Facebook Game Store - SQL Injection Vulnerability

Document Title: =============== Facebook Game Store - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=408 Release Date: ============= 2012-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 408 Produ...

Infographic: How To Spot A Fake Facebook Friend Profile

A whopping 97 percent of fake Facebook profiles purport to be female, according to this infographic based on a new study, announced today, from security firm Barracuda Networks. In order to expand their networks and entice would-be victims, 58 percent of the phony profiles also claim to be bisexu...

How to Win Friends and Steal Their Facebook Accounts

CANCUN–Facebook is a lot of things, and one of the things that it’s become of late is a fertile green field for attackers and scammers of all stripes. The Koobface worm is perhaps the most famous threat to hit the network, but the more mundane ones, such as scammers generating fake profiles...

Facebook Profile Sticker - SQL Injection Vulnerability

Document Title: =============== Facebook Profile Sticker - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=409 Release Date: ============= 2012-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 409...

Facebook Profile Sticker - SQL Injection Vulnerability

Document Title: =============== Facebook Profile Sticker - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=409 Release Date: ============= 2012-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 409...

Facebook, Washington Accuse Marketing Firm of Clickjacking

Facebook and the state of Washington are suing an ad network they accuse of encouraging people to spread spam through clickjacking schemes and other tactics. The company at the center of the allegations, Adscend Media, denies the charges and said it will fight them vigorously. According to the...

Facebook Applications Null Byte Injection

Title ===== Facebook Application Null Byte Injection Date ==== 25/01/2012 Author ====== Bug === Null Byte Injection Introduction ============ The application is currently included and viewable by all facebook users. Facebook is a social networking service and website launched in February 2004,...

Woohooo! After #SopaBlackout, Congress Postpones Action on #SOPA, #PIPA

Woohooo! After SopaBlackout, Congress Postpones Action on SOPA, PIPA A big hurrah to you!!!!! We've won for now SOPA and PIPA were dropped by Congress today. The votes we've been scrambling to mobilize against have been cancelled. When the entire Internet gets angry, Congress takes notice. Both t...

Carberp Trojan Commits Financial Fraud on Facebook

A new iteration of the Carberp trojan is targeting Facebook users, but unlike most Facebook attacks that attempt to pinch login credentials, this one is trying to steal money by fooling users into handing over an e-cash voucher. According to a report from Trusteer’s Amit Klein, the Carberp trojan...

Art And Soul Design SQL Injection

Exploit Title: Art And Soul Design SQL Injection Vulnerability Date: 18/01/2012 - 04.24 Author: 3spi0n Software Website: http://www.artandsoul.co.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.the-picture-box.co.uk/image.php?id=2" SQL...

PhpBridges Blog System SQL Injection

Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...

Koobface Gang Apparently Hiding in Plain Sight

The individuals allegedly responsible for wreaking havoc on Facebook with the infamous Koobface botnet are living lavishly, blatantly flaunting their ill-gotten gains and taking little precautions to cover their tracks. Their locations, travels, business ventures, social media personas, Internet...

URL redirection Vulnerability in Google & Facebook

URL redirection Vulnerability in Google An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web...

Facebook Security Phishing Attack In The Wild

At the time of writing there is a new Facebook phishing attack going on. It will not just try to steal your Facebook credentials; it will also try to steal credit card information and other important information such as security questions. This Facebook phishing attack is pretty interesting becau...

US Congressmen Call Foul on Facebook's Tracking Methods

Two congressmen have accused Facebook of dodging questions about whether it tracks the activity of its 800 million members. On Monday, Representatives Ed Markey D-Mass and Joe Barton R-Tex. questioned the reasoning behind a recent patent application by the site that suggests it may use informatio...

Sony Pictures Website, Facebook Page Defaced

A twitter user operating under the handle @s3rverexe s3rver.exe claims to have hacked into and defaced the website and Facebook page of Sony Pictures. S3rver.exe posted video evidence of the hack on Youtube and allegedly posted comments as the admin on Sony Pictures’ Facebook page. Both the...

Facebook 2012 Hacker Cup announced !

Facebook 2012 Hacker Cup announced Facebook today announced open registration for its second annual Hacker Cup, an annual algorithmic programming contest open to engineers from around the world. Programmers will be judged on accuracy and speed as they race to solve algorithmic problems to advance...