Lucene search
+L

3718 matches found

CNNVD
CNNVD
added 2022/03/23 12:0 a.m.13 views

Meta Facebook Messenger 安全漏洞

Instagram Photo Wall is a social app that runs on mobile and shares the pictures you snap with each other in a fast, wonderful and fun way.Facebook Instagram has an input validation error vulnerability that stems from the failure to properly present URI messages to users, which can be exploited b...

6.5CVSS5.6AI score0.01398EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.12 views

Meta Facebook Messenger 安全漏洞

Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, and more. Facebook WhatsApp suffers from a...

6.5CVSS5.7AI score0.01398EPSS
SaveExploits2References5
Malwarebytes
Malwarebytes
added 2022/03/22 8:47 p.m.22 views

Facebook users wary of security mail find themselves locked out of accounts

It’s not unusual for sites and services to offer additional forms of protection on top of regular security features. Some of the bigger ones even go the extra mile, protecting from attacks up to a potential nation state level. The most famous example of this recently is likely Google. Its Advance...

6.9AI score
SaveExploits0
Kitploit
Kitploit
added 2022/03/21 8:30 p.m.43 views

Vortex - VPN Overall Reconnaissance, Testing, Enumeration And eXploitation Toolkit

VPN Overall Reconnaissance, Testing, Enumeration and Exploitation Toolkit Overview A very simple Python framework, inspired by SprayingToolkit, that tries to automate most of the process required to detect, enumerate and attack common O365 and VPN endpoints like Cisco, Citrix, Fortinet, Pulse,...

8AI score
SaveExploits0References12
ThreatPost
ThreatPost
added 2022/03/21 7:18 p.m.165 views

Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts

A popular mobile app in the official Google Play store called “Craftsart Cartoon Photo Tools” has racked up more than 100,000 installs – but unfortunately for the app’s enthusiasts, it contains a version of the Facestealer Android malware. That’s according to researchers at Pradeo, who said the a...

8.6AI score
SaveExploits0References8
Malwarebytes
Malwarebytes
added 2022/03/21 12:7 p.m.47 views

Facebook phish claims “Someone tried to log into your account”

Watch out for bogus Facebook phishing messages winging their way to your mailbox. The ruse is quite simple: The mail senders are relying on the recipient’s sense of panic to respond without thinking about it. The mail looks professional enough, and seeks to imitate what would be a fairly typical...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/03/16 6:26 a.m.34 views

Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018

The Irish Data Protection Commission DPC on Tuesday slapped Facebook and WhatsApp owner Meta Platforms a fine of €17 million $18.6 million for a series of security lapses that occurred in violation of the European Union's GDPR laws in the region. "The DPC found that Meta Platforms failed to have ...

1.5AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2022/03/11 8:50 p.m.35 views

HBO sued for sharing subscriber data with Facebook

HBO Max subscribers Angel McDaniel and Constance Simon filed a class-action lawsuit against HBO on Tuesday, alleging that the company has violated their privacy by sharing subscriber viewing data with Facebook. Bursor & Fisher filed the case on behalf of McDaniel and Simon. According to case...

0.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/03/11 7:54 a.m.29 views

Here's How to Find if WhatsApp Web Code on Your Browser Has Been Hacked

Meta Platforms' WhatsApp and Cloudflare have banded together for a new initiative called Code Verify to validate the authenticity of the messaging service's web app on desktop computers. Available in the form of a Chrome and Edge browser extension, the open-source add-on is designed to...

0.8AI score
SaveExploits0
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.13 views

WordPress Customer Chat Facebook plugin <= 1.1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Customer Chat Facebook plugin versions = 1.1.1. Solution No patched version available...

2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.19 views

WordPress Customer Chat Facebook plugin <= 1.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Customer Chat Facebook plugin versions = 1.1.1. Solution No patched version available...

3.9AI score
SaveExploits0References2Affected Software1
Malwarebytes
Malwarebytes
added 2022/02/21 3:12 p.m.27 views

Facebook sued for siphoning facial recognition data without consent

Ken Paxton, the Attorney General of Texas, recently filed a lawsuit against Facebooks parent company, Meta, for harvesting the facial recognition data of millions of Texan residents—for a decade. Paxton filed the lawsuit on Monday in the states Harrison County District Court. The suit contains...

0.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/02/16 2:3 p.m.36 views

TrickBot Malware Targeted Customers of 60 High-Profile Companies Since 2020

The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features. "TrickBot is a sophisticated and versatile malware with mor...

0.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.29 views

Improper Input Validation and Excessive Iteration in Go Facebook Thrift

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

7.5CVSS3.8AI score0.01994EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/02/15 1:57 a.m.62 views

GHSA-X4RG-4545-4W7W Improper Input Validation and Excessive Iteration in Go Facebook Thrift

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

7.5CVSS7.3AI score0.01994EPSS
SaveExploits0References6
Wired Threat Level
Wired Threat Level
added 2022/02/08 7:49 p.m.21 views

The Alt-Right on Facebook Are Hijacking Canada’s Trucker Blockade

In Ottawa, a protest against vaccine mandates has become an international sensation. American far-right personalities are behind its online rise...

3.8AI score
SaveExploits0
CNNVD
CNNVD
added 2022/02/02 12:0 a.m.9 views

Facebook WhatsApp 缓冲区错误漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses contact information in a smartphone to find contacts using the software to send texts, pictures, etc. WhatsApp Business is the commercial...

9.1CVSS8.4AI score0.01119EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/01 12:0 a.m.37 views

ASB-A-193890833

In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

5.5CVSS5.1AI score0.00111EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/01/31 5:56 p.m.31 views

NSO Group Pegasus Spyware Aims at Finnish Diplomats

The controversial Pegasus spyware, developed by NSO Group, has been found on the devices of Finland’s diplomatic corps serving outside the country as part of a wide-ranging espionage campaign, according to Finnish officials. They also said the infections were of the zero-click variety. “The highl...

7AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2022/01/17 1:15 p.m.4 views

CVE-2021-25065

The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page...

5.4CVSS6AI score0.01217EPSS
SaveExploits2References3
Rows per page
Query Builder