Facebook Careers Page XXE Vulnerability Patched

A vulnerability was discovered and patched in a third-party service that handles resumes on Facebook’s careers page. The discovery was worth more than $6,000 in a bounty paid out by Facebook to researcher Mohamed Ramadan of Egypt, who published some details of the vulnerability and exploit on his...

Wickr Desktop 2.2.1 Windows - Denial of Service

Wickr Desktop 2.2.1 Windows - Denial of Service Document Title: =============== Wickr Desktop v2.2.1 Windows - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1377 Video:...

CVE-2014-7685

The CVE-2014-7685 entry concerns the Razer Comms (com.razerzone.comms) Android app version 1.3.07, which fails to verify X.509 certificates from SSL servers. This weakens TLS, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The conne...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

Cross site scripting

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

CVE-2014-6392

The CVE-2014-6392 entry concerns an XSS vulnerability in the Facebook iOS apps: Facebook 14.0 and Messenger 10.0, exploitable via a crafted filename extension that is mishandled during MIME sniffing of chat traffic. The vendor disputes the impact, noting an interstitial warning is shown and the H...

PT-2014-7206 · Facebook · Facebook App +1

Name of the Vulnerable Software and Affected Versions: Facebook app version 14.0 Facebook Messenger app version 10.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME...

CVE-2014-5643

The CVE-2014-5643 entry concerns the Instachat – Instagram Messenger Android app (com.instachat.android), version 1.6.2. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cra...

iPhone and then exposed security vulnerabilities: silent call-vulnerability warning-the black bar safety net

Security personnel recently discovered the iPhone in one of the latest vulnerabilities, the user can view the malicious information when automatically dialing the telephone, and is not user found. ! iPhone then exposed security vulnerabilities silently call Mobile device the phone number in often...

iPhone vulnerability allows the phone to automatically dial expensive toll-vulnerability warning-the black bar safety net

Developer Andrei Neculaesei,found that although Safari will ask the user whether to make a call, but like Facebook Messenger and Google+, etc. most big name applications are not and the user to confirm whether to dial the telephone, but simply go ahead and make the call. Andrei Neculaesei create ...

Yahoo! Messenger 11.5.0.228 Cross Site Scripting

Document Title: =============== Yahoo! Bug Bounty 29 YM - Filter Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: =============...

Yahoo Fixes Trio of Bugs in Mail, Messenger, Flickr

Yahoo recently patched three remotely exploitable vulnerabilities in its services that could have let attackers inject malicious script and led to session hijacking, phishing, among other nefarious tricks. The vulnerabilities in Yahoo Mail, Messenger and its Flickr photo-sharing site qualified fo...

Yahoo! Messenger v11 - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...

Yahoo! Messenger v11 - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

Infosec A-Team to Launch NSA-Proof Invisible Messenger for Whistleblowers

If a whistleblower discloses an activity to the public, then there should be a trust-based mechanism that ensure the protection of truth-tellers on an international level by hiding their identities. In an effort to provide this kind of service and security, Security experts grouped together to...

AOL Instant Messenger 4.x Unauthorized Actions Vulnerability

0 0 0 0 source: http://www.securityfocus.com/bid/5246/info The AOL Instant Messenger client is prone to an issue which may allow maliciously crafted HTML to perform unauthorized actions such as adding entries to the buddy list on behalf of the user of a vulnerable client. This condition is due to...

LAN Messenger <= 1.2.28 - Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Exploit Title: LAN Messenger = v1.2.28 Remote Denial of Service Vulnerability Version: = v1.2.28 Date: 2012-04-28 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://lanmsngr.sourceforge.net/ Tested on: Windows XP SP3...