CVE-2010-4333

Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies...

CVE-2010-4333

Pointter PHP Micro-Blogging Social Network 1.8 is affected by an authentication bypass vulnerability that lets an attacker obtain administrative privileges by crafting two cookies, auser and apass, with arbitrary values. The presence of these cookies suffices to escalate to admin, with no authent...

Pointter PHP Micro-Blogging Social Network Unauthorized Privilege

Exploit for php platform in category web applications 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging...

Pointter PHP Micro-Blogging Social Network 1.8 Privilege Escalation

'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Network' authentication system which allo...

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in th...

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation

'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Network' authentication system which allo...

Twitter Locks Out Wikileaks DDoS Group As Attacks Spread

Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service DoS attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its founder,...

Top 10 IT Security Trends for 2011

The crystal ball gazing has started early this year. Typically, tech prediction pieces emerge after Christmas, but the first 'security trends for 2011' missive has already dropped into my inbox. So, what does the somewhat premature Imperva Application Defense Center think will worry us the most o...

Facebook to Launch Email Service, Competing with Gmail and Yahoo Mail

Facebook is set to launch an integrated email service on Monday, aiming to compete with Gmail and Yahoo Mail. This move will position Facebook as the largest email service provider in the world, serving its 500 million users. TechCrunch, a prominent Silicon Valley technology blog, reported that...

Facebook Glitch Locks Out Accounts

A bug in an account verification system used by Facebook resulted in a wave of account suspensions Tuesday that had users locked out of the world’s largest social network and scratching their heads over the reason. Facebook discovered a bug in a system designed to detect and disable fake accounts...

Popular Facebook Games Exposing User Data to Third Parties

Facebook privacy has been a recurring topic in the news. With the massive number of users on the site, the amount of personal data involved is enormous. Recently, it has been revealed that many popular third-party apps, mainly games like Farmville and Texas HoldEm Poker, are leaking the unique...

Firesheep – Social Network Session Stealing/Hijacking Tool

A huge wave has been made by this tool in the mainstream media this week as it makes session stealing/hijacking a click and go procedure. It was released at Toorcon 12 and is simply a Firefox Add-on. Stealing sessions/passwords and so on is something we've been able to do for a LONG time using...

After Twitter Hack, NY Times Debates Social Network Security

In the wake of a high profile though harmless cross site scripting attack launched from Twitter.com’s Web site, the New York Times is sponsoring a debate about the security of online social networks that offers some harsh criticism of the micro blogging site. The Gray Lady pulled together top nam...

Twitter Closes Web Hole After Attack Hits Up to 500,000

UPDATE: Engineers at social network Twitter.com plugged a vulnerability in the company’s main Web page after attacks that exploited the hole may have hit more than 500,000 users. The security hole was patched at about 9:45 AM ET, according to a post by Del Harvey @delbius, the head of Twitter’s...

Tuenti.com Insecure Direct Object Reference

============================================= INTERNET SECURITY AUDITORS ALERT 2010-008 - Original release date: August 30th, 2010 - Last revised: September 21st, 2010 - Discovered by: Vicente Aguilera Diaz - Severity: 4/10 CVSSv2 Base Scored ============================================= I...

New Survey Scams In Apple's iTunes Social Network

Spammers have been quick off the mark in exploiting Apple’s new iTunes social network to punt survey scams. Read the full article. The Register...

Pointter Social Network Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : pointter Social network LFI Vulnerablility Date : july, 2 2010 Critical Level : HIGH Vendor Url : http://www.pointter.com/ Author : Sid3^effects aKa HaRi special...

Iphone Pointter Social Network LFI Vulnerablility

Exploit for php platform in category web applications ================================================= Iphone Pointter Social Network LFI Vulnerablility ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Pointter Social Network - Local File Inclusion

Pointter Social Network - Local File Inclusion 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : pointter Social network LFI Vulnerablility Date : july, 2 2010 Critical Level : HIGH Vendor Url :...

Pointter Social Network - Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : pointter Social network LFI Vulnerablility Date : july, 2 2010 Critical Level : HIGH Vendor Url : http://www.pointter.com/ Author : Sid3^effects aKa HaRi special...