Facebook Cross-Site Request Forgery vulnerability

Exploit for unknown platform in category web applications ================================================= Facebook Cross-Site Request Forgery vulnerability ================================================= ============================================= INTERNET SECURITY AUDITORS ALERT 2010-002 -...

Facebook Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2010-001 - Original release date: January 8th, 2010 - Last revised: February 3rd, 2010 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS Base Score ============================================= I. VULNERABILIT...

Scareware Found In 'Unknown Facebook App'

Scareware scammers are taking advantage of rumors about an “unnamed app” that supposedly poses a security risk to Facebook users in order to trick users into sites slinging rogue security software packages. Read the full article. The Register...

AT&T Flaw Let Facebook Users See Accounts

A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers’ accounts with full access to troves of private information. Read the full article. Associated Press...

Facebook Vulnerable to Clickjacking Attacks

Facebook is susceptible to certain types of attacks that could allow someone to hijack an account while a user is interacting with another Web site, a security researcher warned on Monday. Reseacher Nitesh Dhanjani also said a design flaw in Facebook is granting third-party apps permission to...

Fake Facebook Groups Hide Insidious Malware

A false rumor suggesting that Facebook is to start charging is being used to bait malware traps.Thousands of disgruntled users, angry at the false claims that a $4.99 a month charge for using the social networking site that will supposedly kick in have been induced to visit “protest group” sites ...

Top Facebook, Twitter Hacks From 2009

Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...

Facebook for iPhone persistent XSS

================================== Facebook for iPhone persistent XSS ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 /' /' / /' 0 /, // ,/ / 1 // /' / // /' / /' 0 / / / / / / 1 / / 0 ////// // // // // // 1 / Exploit database...

Facebook for iPhone persistent XSS

No description provided by source. ================================== Facebook for iPhone persistent XSS ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Facebook For iPhone Cross Site Scripting

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App...

Facebook for iPhone persistent XSS DOS

Exploit for unknown platform in category dos / poc ====================================== Facebook for iPhone persistent XSS DOS ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Facebook Clickjacking Attack Spreading

A new clickjacking attack has targeted Facebook users with photos and images posted in the comments section. Read the full article. Help Net Security...

Facebook Usage Detection

Binary data 5272.prm...

Video Hides Koobface on Facebook Wall Posts

A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. The Last Watchdog...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

Why Privacy Concerns Are Ruining Facebook

Facebook was built as a powerful social connector, allowing users to befriend others with similar interests, locations, schools, and more. But as privacy concerns mount and users demand more protection, the social networking site’s philosophy has started to go down the toilet. Now that Facebook i...

Unfixed XSS vulnerability at apps.facebook.com

Security researcher homeostasie ft p3lo, has submitted on 30/11/2009 a cross-site-scripting XSS vulnerability affecting apps.facebook.com, which at the time of submission ranked 2 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It i...

Facebook Blocks XXX Clickjacking

Facebook administrators have blocked a clickjacking exploit that displayed images of a scantily clad woman on profile pages without first prompting the user for permission. Read the full article. The Register...