Facebook Profile Sticker - SQL Injection Vulnerability

Document Title: =============== Facebook Profile Sticker - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=409 Release Date: ============= 2012-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 409...

Facebook Profile Sticker - SQL Injection Vulnerability

Document Title: =============== Facebook Profile Sticker - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=409 Release Date: ============= 2012-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 409...

Facebook, Washington Accuse Marketing Firm of Clickjacking

Facebook and the state of Washington are suing an ad network they accuse of encouraging people to spread spam through clickjacking schemes and other tactics. The company at the center of the allegations, Adscend Media, denies the charges and said it will fight them vigorously. According to the...

Facebook Applications Null Byte Injection

Title ===== Facebook Application Null Byte Injection Date ==== 25/01/2012 Author ====== Bug === Null Byte Injection Introduction ============ The application is currently included and viewable by all facebook users. Facebook is a social networking service and website launched in February 2004,...

Woohooo! After #SopaBlackout, Congress Postpones Action on #SOPA, #PIPA

Woohooo! After SopaBlackout, Congress Postpones Action on SOPA, PIPA A big hurrah to you!!!!! We've won for now SOPA and PIPA were dropped by Congress today. The votes we've been scrambling to mobilize against have been cancelled. When the entire Internet gets angry, Congress takes notice. Both t...

Carberp Trojan Commits Financial Fraud on Facebook

A new iteration of the Carberp trojan is targeting Facebook users, but unlike most Facebook attacks that attempt to pinch login credentials, this one is trying to steal money by fooling users into handing over an e-cash voucher. According to a report from Trusteer’s Amit Klein, the Carberp trojan...

Art And Soul Design SQL Injection

Exploit Title: Art And Soul Design SQL Injection Vulnerability Date: 18/01/2012 - 04.24 Author: 3spi0n Software Website: http://www.artandsoul.co.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.the-picture-box.co.uk/image.php?id=2" SQL...

PhpBridges Blog System SQL Injection

Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...

Koobface Gang Apparently Hiding in Plain Sight

The individuals allegedly responsible for wreaking havoc on Facebook with the infamous Koobface botnet are living lavishly, blatantly flaunting their ill-gotten gains and taking little precautions to cover their tracks. Their locations, travels, business ventures, social media personas, Internet...

URL redirection Vulnerability in Google & Facebook

URL redirection Vulnerability in Google An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web...

Facebook Security Phishing Attack In The Wild

At the time of writing there is a new Facebook phishing attack going on. It will not just try to steal your Facebook credentials; it will also try to steal credit card information and other important information such as security questions. This Facebook phishing attack is pretty interesting becau...

US Congressmen Call Foul on Facebook's Tracking Methods

Two congressmen have accused Facebook of dodging questions about whether it tracks the activity of its 800 million members. On Monday, Representatives Ed Markey D-Mass and Joe Barton R-Tex. questioned the reasoning behind a recent patent application by the site that suggests it may use informatio...

Sony Pictures Website, Facebook Page Defaced

A twitter user operating under the handle @s3rverexe s3rver.exe claims to have hacked into and defaced the website and Facebook page of Sony Pictures. S3rver.exe posted video evidence of the hack on Youtube and allegedly posted comments as the admin on Sony Pictures’ Facebook page. Both the...

Facebook 2012 Hacker Cup announced !

Facebook 2012 Hacker Cup announced Facebook today announced open registration for its second annual Hacker Cup, an annual algorithmic programming contest open to engineers from around the world. Programmers will be judged on accuracy and speed as they race to solve algorithmic problems to advance...

Sony Pictures Facebook Page & Website Hacked again !

Sony Pictures Facebook Page & Website Hacked again ! The hacking group Anonymous has confirmed that they have once again hacked Sony Pictures, gaining access to their Facebook account and website. Anonymous did threaten Sony for supporting the controversial SOPA bill and now it seems that the...

New Ramnit Variant Is Stealing Facebook Credentials

The Ramnit worm, which was first detected more than 18 months ago, has continued to evolve and now has spawned a version that is targeting victims’ Facebook credentials, and with great success. Researchers at Seculert in Israel have found a variant of Ramnit that is stealing those credentials and...

New Clickjacking Scam Uses Facebook, Javascript, Our Primate Brain To Spread

A researcher at Kaspersky Lab is warning of a new scam that pastes racy photos to victims’ Facebook pages while forcing them to view Web-based advertisements promoted by the scammers. Writing on the Securelist blog, Kaspersky Lab Expert David Jacoby said that the scam was circulating among Facebo...

Facebook Scam : Selena Gomez Caught On Leaked Tape

Facebook Scam : Selena Gomez Caught On Leaked Tape Another Facebook Scam is circulating with the headline "Selena Gomez Caught On Leaked Tape" and Message "you will lost your all respect for Selena Gomez after watching this". By Clicking the wall post link takes you to the following page designed...

WordPress Facebook Page Promoter Lightbox Cross Site Scripting

Exploit Title: Wordpress facebook-page-promoter-lightbox plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link:...

Microsoft Windows Phone 7.5消息处理拒绝服务漏洞

Bugtraq ID: 51179 Microsoft Windows Phone是一款智能手机设备，基于移动windows操作系统 Microsoft Windows Phone处理消息存在错误，攻击者可以构建特制文本消息通过SMS, Facebook chat或Windows Live发送，使目标用户设备重启或处理消息相关的功能不能使用 0 Microsoft Windows Phone 7.5 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com/windowsmobile/default.mspx...