ok.ru: Отсутствие CSRF ключа на функции Закрытый Профиль.

"Friends only" account mode could be toggled on and off with a CSRF attack. Настройка Закрытый профиль могла быть включена или выключена через CSRF...

Patched Facebook Vulnerability Could Have Exposed Private Information About You and Your Friends

In a previous blog we highlighted a vulnerability in Chrome that allowed bad actors to steal Facebook users’ personal information; and, while digging around for bugs, thought it prudent to see if there were any more loopholes that bad actors might be able to exploit. What popped up was a bug that...

friends-corner.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-696988 Description| Value ---|--- Affected Website:| friends-corner.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

effective-altruism.com XSS vulnerability

Open Bug Bounty ID: OBB-650266 Description| Value ---|--- Affected Website:| effective-altruism.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pets-n-friends.com XSS vulnerability

Open Bug Bounty ID: OBB-649604 Description| Value ---|--- Affected Website:| pets-n-friends.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

my.sporx.com XSS vulnerability

Open Bug Bounty ID: OBB-643284 Description| Value ---|--- Affected Website:| my.sporx.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

friends-of-turkey.eu XSS vulnerability

Open Bug Bounty ID: OBB-637944 Description| Value ---|--- Affected Website:| friends-of-turkey.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

artdeco-friends-of-beauty.de XSS vulnerability

Open Bug Bounty ID: OBB-624642 Description| Value ---|--- Affected Website:| artdeco-friends-of-beauty.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sound-of-friends.de XSS vulnerability

Open Bug Bounty ID: OBB-591665 Description| Value ---|--- Affected Website:| sound-of-friends.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PG All Share Video SQL Injection Vulnerability

PG All Share Video is a set of video sharing website scripts. A SQL injection vulnerability exists in PG All Share Video version 1.0. A remote attacker can exploit this vulnerability by sending PATHINFO to search/tag, friends/index, or users/profile to inject SQL commands...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

Sql injection

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

Twitter OSINT Tool Tinfoleak

tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates subsequent analysis for the generation of intelligence. Taking a user identifier, geographic...

Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update

Sarahah, the anonymous messaging app that shot to the top of app stores earlier this summer, says it plans to remove a feature that uploads users’ contacts, including phone numbers and email addresses to the company’s servers, in the next update. The app’s creator, Zain al-Abidin Tawfiq, caught...

Beware! Viral Sarahah App Secretly Steals Your Entire Contact List

Are you also one of those 18 Million users using SARAHAH? You should beware of this app because the anonymous feedback application may not be as private as it really sounds. Sarahah is a newly launched app that has become one of the hottest iPhone and Android apps in the past couple of weeks,...

Friends in War Make or Break Cross-Site Request Forgery Vulnerability

Friends in War Make or Break is a foreign web application. Friends in War Make or Break cross-site request forgery vulnerability. The vulnerability can be exploited to change the administrator password...

Friends in War Make or Break Authentication Bypass Vulnerability

Make or Break is a parenting blog. An authentication bypass vulnerability exists in Friends in War Make or Break. It allows an attacker to bypass login authentication via injection...

Friends In War Make Or Break 1.7 SQL Injection

Exploit Title: Friends in War Make or Break 1.7 SQL Injection Dork: N/A Date: 26.07.2017 Vendor : http://software.friendsinwar.com/ Software: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Demo: http://localhost/PATH/ Version: 1.7 Author: Ihsan Sencan SQL Injection/Exploit :...

Friends In War Make Or Break 1.7 Password Change

Friends in War Make or Break 1.7 - Unauthenticated admin password change Url: http://software.friendsinwar.com/ http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.altervista.org/...