Geotweet - Social engineering tool for human hacking

Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...

Alpine PhotoTile for Instagram <= 1.2.7.5 - Authenticated Cross-Site Scripting (XSS)

The alpine-photo-tile-for-instagram WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

oninstagram.com XSS vulnerability

Vulnerable URL: http://www.oninstagram.com/profile/search?query=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress Portfolio 1.0 Cross Site Request Forgery Vulnerability

WordPress Portfolio plugin version 1.0 suffers from a cross site request forgery vulnerability. Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL:...

WordPress Portfolio 1.0 Cross Site Request Forgery

Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL: https://wordpress.org/plugins/portfolio-by-lisa-westlund/ Vulnerability Type: Cross-site Request Forgery CWE-352 Affected...

[Responsible disclosure] How I could have hacked 62.5 million Zomato Users

Note: This is being published with the permission of Zomato Team. The vulnerability is now fixed. Zomato is an online restaurant search and discovery service providing information on home delivery, dining-out, cafés and nightlife for various cities of India and 21 other countries. It has 62.5...

Instagram Mobile Application Detection

Binary data 8776.prm...

Google to Introduce New Photo-Sharing Platform to Kill Instagram

Google is reportedly going to launch a new online photo-sharing service and storage option at its developer conference later this month, which Bloomberg says, will not be a part of its Google+ social network. At the moment, Google offers a photo sharing service known as "Google+ Photos," which...

WordPress WP Instagram Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress WP Instagram Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Instagram API Bug Could Allow Malware Downloads

A security researcher says there is a bug in the Instagram API that could enable an attacker to post a message with a link to a page he controls that hosts a malicious file, but when the user downloads the file it will appear to come from a legitimate Instagram domain, leading the victim to trust...

Taylor Swift's Twitter and Instagram Accounts Hacked

The very popular Pop star Taylor Swift became the latest celebrity to have their social media accounts hacked on Tuesday. The 25-year-old "Shake It Off" singer, who has the fourth-most popular Twitter account with 51.4 million followers, appeared to be asking her millions of followers to follow...

Instagram Patches flaw that Makes Private Photos Visible

Your Instagram is not as Private as You Think. Millions of private Instagram photos may have been exposed publicly on the web until the company patched a privacy hole this weekend. Instagram team was unaware of a security vulnerability from long time which allowed anyone with access to an image’s...

CVE-2014-6834

The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6834

The CVE-2014-6834 entry concerns Instaroid - Instagram Viewer (net.muik.instaroid) for Android (version 1.2.1). Affected component: SSL/TLS certificate validation in the app; root cause is that X.509 certificates from SSL servers are not verified, which can allow MITM attackers to spoof servers a...

CVE-2014-6834

The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

The relevant departments repair. Instagram can be accessed vulnerability-vulnerability warning-the black bar safety net

Today the Facebook-owned photo-sharing service Instagram be blocked in social networking sites such as Sina Weibo, Instagram search is also shielded. As early as this year 7 month, Instagram application from the main domestic third-party Android stores disappear. It is not possible to determine...

CVE-2014-6690

Affected software: InstaMessage – Instagram Chat (aka com.futurebits.instamessage.free), version 1.6.2 for Android. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: MITM attackers could spoof legitimate servers and obtain sensitive information via a crafted certifi...

Design/Logic Flaw

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...