How Spammy Facebook Scams Still Manage to Claim Millions of Victims

As Facebook scams continue to loom and infiltrate news feeds, web security firm Websense has conducted a study to tabulate just how far these campaigns stretch. The news isn’t encouraging, with scams on Facebook estimated to reach more than a million users in a matter of days. According to a...

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google India's authorities are already forcing Research In Motion to grant access to the encrypted email and instant messages of its BlackBerry users, and now the government is pressuring Google and Skype too. Doesn't the...

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google India's authorities are already forcing Research In Motion to grant access to the encrypted email and instant messages of its BlackBerry users, and now the government is pressuring Google and Skype too. Doesn't the...

Elgg 1.7.9 Cross Site Scripting

Elgg 1.7.9 = | Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The Elgg 1.7.9 and lower versions are vulnerable to multiple Cross Site Scripting. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities...

Anonplus.com (Anonymous Social Networking Site) Hacked by AKINCILAR

Anonplus.com Anonymous Social Networking Site Hacked by AKINCILAR After several members of Anonymous were reportedly banned from Google+ , the hacker group has announced they will be building their own social network called Anonplus.com . Today Anonplus.com Got defaced by AKINCILAR with page titl...

BlueSoft Social Networking CMS SQL Injection Vulnerability

BlueSoft Social Networking CMS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google+ Knows Where You Live!

Much like geolocation services Foursquare, Gowalla and Facebook, Google+ is counting on your desire to share what you’re doing wherever you are. Accordingly, Google+ allows you to geotag content, such as photos, that you upload. This is a great feature. But, as Threatpost has reported, geolocatio...

The Social Networking CMS SQL Injection

Exploit Title: The Social Networking CMS SQL Injection Vulnerability Google Dork: intext:The Social Networking CMS Date: 17/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.shopbluesoft.com/demo Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , Darkknight , Bug Researchers Members...

BlueSoft Social Networking CMS - SQL Injection

source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Operations AntiSec : Anonymous takes down Tunisian government site

Operations AntiSec : Anonymous takes down Tunisian government site As LulzSec calling it quits, but the hacking via Operations AntiSec continues. Hacker group Anonymous claimed responsibility of taking down Tunisian government's official website moments ago.The seized domain now displays text...

Hacking Demo On Facebook Photos Leads To Arrest and Privacy Questions

A public demonstration of a weakness in Facebook’s account security has attracted the attention of law enforcement in Australia and raised questions about the ability of social networks to protect user data. Security researcher Christian Heinrich conducted a brute force attack against the Faceboo...

Poken.com Cross Site Request Forgery

Poken is a technology that utilizes a proprietary Near Field Communication NFC technology to allow the exchange of online social networking data between two keychain accessories. Poken.com is the website where poken users can edit their profiles, and browse other poken friends they already met...

November, 2010: PS3 Master Key Hacked Retweeted – by Sony

Maybe the only thing worse than having the master key to your company’s incredibly valuable video gaming platform published online by a brilliant and iconoclastic hacker is having the social networking account for the fictitious TV personality your company spent millions of dollars creating forwa...

Lahore High court to Consider Permanent Ban on Facebook !

Lahore High court to Consider Permanent Ban on Facebook ! In Pakistan, blanket bans and censorship have been a regular feature. Since 2006, there have been instances where YouTube has been blocked, and more recently, Facebook. While the pretext is national security, the protection of Islam or the...

Truth About Facebook - CIA, U.S. government - Everything Related !

Truth About Facebook - CIA, U.S. government - Everything Related ! The Truth about who owns facebook. In todays world of advanced modern technology, there are billions of people that use Internet as a means of communication. The era of Big Brother is upon us. George Orwell predicted it and, now...

WatchDek Social Networking XSRF (Force Add attacker as Friend)

Exploit for php platform in category web applications + Exploit Title: WatchDek Social Networking XSRF Vulnerability Force Add attacker as Friend + Author : ^Xecuti0n3r + E-mail : xecutioneryahoo.com + Category : Web Apps XSRF + App website: watchdek.com All you have to do is save the below code ...

WatchDek Social Networking XSRF (Force Delete Victim Inbox)

Exploit for php platform in category web applications + Exploit Title: WatchDek Social Networking XSRF Vulnerability Force Delete Victim Inbox + Author : ^Xecuti0n3r + E-mail : xecutioneryahoo.com + Category : Web Apps XSRF + App website: watchdek.com All you have to do is save the below code as...

Watchdek Force Delete Cross Site Request Forgery

Exploit Title: WatchDek Social Networking XSRF Vulnerability Force Delete Victim Inbox + Author : ^Xecuti0n3r + Date : 7.04.2011 + Hour : 13:37 PM + E-mail : xecutioneryahoo.com + Category : Web Apps XSRF + App website: watchdek.com All you have to do is save the below code as exploit.html Then...

[SECURITY] [DSA 2206-1] New mahara packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 2206-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2011 http://www.debian.org/security/faq -...

XSS Vulnerabilities in Russian Social Networking Site 'VKontakte'

A short while ago, I decided to prepare a presentation on web vulnerabilities and specifically on XSS attacks. This involved studying the way today's filtration systems work. I selected the most popular Russian social networking website, VKontakte.ru, as a test bed. One thing that grabbed my...