Fake Facebook Groups Hide Insidious Malware

A false rumor suggesting that Facebook is to start charging is being used to bait malware traps.Thousands of disgruntled users, angry at the false claims that a $4.99 a month charge for using the social networking site that will supposedly kick in have been induced to visit “protest group” sites ...

Top Facebook, Twitter Hacks From 2009

Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...

Facebook for iPhone persistent XSS

================================== Facebook for iPhone persistent XSS ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 /' /' / /' 0 /, // ,/ / 1 // /' / // /' / /' 0 / / / / / / 1 / / 0 ////// // // // // // 1 / Exploit database...

Facebook for iPhone persistent XSS

No description provided by source. ================================== Facebook for iPhone persistent XSS ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Facebook For iPhone Cross Site Scripting

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App...

Facebook for iPhone persistent XSS DOS

Exploit for unknown platform in category dos / poc ====================================== Facebook for iPhone persistent XSS DOS ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Facebook Clickjacking Attack Spreading

A new clickjacking attack has targeted Facebook users with photos and images posted in the comments section. Read the full article. Help Net Security...

Facebook Usage Detection

Binary data 5272.prm...

Video Hides Koobface on Facebook Wall Posts

A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. The Last Watchdog...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

Why Privacy Concerns Are Ruining Facebook

Facebook was built as a powerful social connector, allowing users to befriend others with similar interests, locations, schools, and more. But as privacy concerns mount and users demand more protection, the social networking site’s philosophy has started to go down the toilet. Now that Facebook i...

Unfixed XSS vulnerability at apps.facebook.com

Security researcher homeostasie ft p3lo, has submitted on 30/11/2009 a cross-site-scripting XSS vulnerability affecting apps.facebook.com, which at the time of submission ranked 2 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It i...

Facebook Blocks XXX Clickjacking

Facebook administrators have blocked a clickjacking exploit that displayed images of a scantily clad woman on profile pages without first prompting the user for permission. Read the full article. The Register...

Facebook XXX Worm Replaces Profiles

Security researchers have identified a new worm spreading across Facebook, luring people out to adult Web sites and automatically replicating itself across people’s profile pages. Read the full article. internetnews.com...

Facebook Administrator Groups Hijacked

As of this morning, an anonymous group hijacked more than 200 Facebook groups and renamed them “Control Your Info”. Pasted on each group’s Wall was a message announcing that it had been “hijacked” and reminding members to be careful about controlling personal information on social networking site...

Google Reader Used in Koobface Attack

The attackers behind the insidious Koobface worm have taken to using Google Reader accounts that they control to spread the worm through shared Reader items. The infection method–which has been used before by Facebook worms–is another indication of the resilience and changing tactics the malware...

Facebook, MySpace Fix Subdomain Errors

Facebook and MySpace have fixed errors that could have allowed data to be given out from its subdomains. A Dutch developer, Yvo Schaap, discovered the flaw and wrote on his blog: “A “more invasive and hidden exploit could harvest all the user’s personal photos, data and messages to a central serv...

Researchers Find Trojan Using Facebook

Researchers at Symantec have discovered a trojan that uses Facebook to communicate with a control and command server. Dubbed “whitewell” this malware spreads via email, contacts the mobile version of Facebook and uses its Notes section to perform actions based on the Notes titles. Andrea Lelli...