Ultimate Instagram Feed <= 1.3 - Authenticated Cross-Site Scripting (XSS)

Author: OmarK The vulnerability lies in the "accesstoken" parameter and can cause reflected XSS vulnerability. The issue is on the file ultimate-instagram-feed/admin/partials/uif-access-token-display.php line 19: the vulnerable code is the following: echo $GET'accesstoken'; There is an echo of th...

WordPress Ultimate Instagram Feed 1.2 Cross Site Scripting

------------------------------------------ Ultimate Instagram Feed - WordPress plugin Version: 1.2 Author: OmarK ------------------------------------------ The vulnerability lies in the "accesstoken" parameter and can cause reflected XSS vulnerability. The issue is on the file...

zaptourviagens.com.br XSS vulnerability

Vulnerable URL: http://www.zaptourviagens.com.br/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=false=true=100%=350pxℑ=medium=285989=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value...

bordadamata.mg.gov.br XSS vulnerability

Vulnerable URL: http://www.bordadamata.mg.gov.br/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=true=true=100%=375pxℑ=medium=00563C=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value ---|-...

divinocha.com XSS vulnerability

Open Bug Bounty ID: OBB-359690 Description| Value ---|--- Affected Website:| divinocha.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Labs report: summer ushers in unprecedented season of breaches

In this edition of the Malwarebytes Cybercrime Tactics and Techniques report for the third quarter of 2017, we saw a number of high profile breaches targeting the personal information of hundreds of millions of people. While the Equifax breach may have dominated the news cycle, notable attacks...

l.instagram.com XSS vulnerability

Open Bug Bounty ID: OBB-323272 Description| Value ---|--- Affected Website:| l.instagram.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

l.instagram.com Open Redirect vulnerability

Vulnerable URL: http://l.instagram.com/?e=ATN5z269QUrerKM8xE-rBBS08M3oDC1e694fsY39ek5NSX6e5pGF3vaJSsNmyQ=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:|...

Stolen 6M Celebrities data from Instagram sold on Dark Web

By Waqas The data is available on a searchable website called DoxaGram. This is a post from HackRead.com Read the original post: Stolen 6M Celebrities data from Instagram sold on Dark Web...

Instagram Hacker Puts 6 Million Celebrities Personal Data Up For Sale On DoxaGram

It's now official, Instagram has suffered a massive data breach, and reportedly an unknown hacker has stolen personal details of more than 6 million Instagram accounts. Just yesterday, we reported that Instagram had patched a critical API vulnerability that allowed the attacker to access phone...

Instagram hacked; data of top celebrities stolen and traded

By Waqas Facebook owned Instagram said that unknown hackers have exploited a This is a post from HackRead.com Read the original post: Instagram hacked; data of top celebrities stolen and traded...

Hackers steal Instagram account information success of the current exploits have been patched-vulnerability warning-the black bar safety net

Today Instagram announced that there are at least a hacker be able to steal well-known user accounts personal information, such things happen mainly because the system has loopholes, and now the vulnerability has been fixed. Instagram representatives said in a statement:“we recently discovered...

Instagram Suffers Data Breach! Hacker Stole Contact Info of High-Profile Users

Instagram has recently suffered a possibly serious data breach with hackers gaining access to the phone numbers and email addresses for many "high-profile" users. The 700 million-user-strong, Facebook-owned photo sharing service has currently notified all of its verified users that an unknown...

Someone Hacked Selena Gomez Instagram, Shared Nude Justin Bieber Photos

The highest followers account on Instagram owned by Selena Gomez has recently been hacked with unknown hackers posting a bunch of nude photographs of her ex-boyfriend Justin Bieber on her account. The latest hack is not part of the ongoing Fappening events affecting a majority of celebrities by...

Selena Gomez’ Instagram hacked; posts nude photos of Justin Bieber

By Carolina Earlier today August 28, the official Instagram of popular singer Selena This is a post from HackRead.com Read the original post: Selena Gomez Instagram hacked; posts nude photos of Justin Bieber...

Why It’s Still A Bad Idea to Post or Trash Your Airline Boarding Pass

An October 2015 piece published here about the potential dangers of tossing out or posting online your airline boarding pass remains one of the most-read stories on this site. One reason may be that the advice remains timely and relevant: A talk recently given at a Czech security conference...

KUKU - Schedule Instagram Post - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application KUKU - Schedule Instagram Post published at the 'play' market has multiple vulnerabilities...

Instagram - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Instagram published at the 'play' market has multiple vulnerabilities...

Story downloader for Instagram - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Story downloader for Instagram published at the 'play' market has multiple vulnerabilities...

Story Saver for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Story Saver for Instagram published at the 'play' market has multiple vulnerabilities...