Social Net Info Is a Data Mine for Criminals

Computer scientists and policy experts say that such seemingly innocuous bits of self-revelation on social networking sites like Facebook, Twitter, Flickr, etc. can increasingly be collected and reassembled by computers to help create a picture of a person’s identity, sometimes down to the Social...

Top 5 Social Networking Business Threats

Social networking sites are ideal havens for online criminal activities as they provide a combination of two key factors: a huge number of users and a high-level of trust among these users, cautioned a security specialist. ZDNet Asia spoke to industry experts who highlight the top five security...

PHPMySpace Detection

This host is running PHPMySpace. PHPMySpace is a social networking software written in php. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PHPMySpace Detection

This host is running PHPMySpace. PHPMySpace is a social networking software written in php. OpenVAS Vulnerability Test $Id: PHPMySpacedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PHPMySpace Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free...

SA-CONTRIB-2010-001 - Wunderbar - Cross Site Scripting

The Wunderbar! module provides a floating bar with configurable buttons and the ability to link off to social networking sites. The module does not properly escape user names, potentially allowing a cross site scripting XSS attack which may lead to the user gaining full administrative access. The...

social Web CMS Beta 2 - Multiple Vulnerabilities

social Web CMS Beta 2 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...

SQL Injection Hits Social Net for Developers

A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. eWEEK Europe...

Flock 2.5.2 Remote Array Overrun

Flock 2.5.2 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected Software: - Flock 2.5.2 Fixed in: - Flock 2.5.5 NOTE: Prior...

Why Privacy Concerns Are Ruining Facebook

Facebook was built as a powerful social connector, allowing users to befriend others with similar interests, locations, schools, and more. But as privacy concerns mount and users demand more protection, the social networking site’s philosophy has started to go down the toilet. Now that Facebook i...

Facebook Administrator Groups Hijacked

As of this morning, an anonymous group hijacked more than 200 Facebook groups and renamed them “Control Your Info”. Pasted on each group’s Wall was a message announcing that it had been “hijacked” and reminding members to be careful about controlling personal information on social networking site...

On Social Networking Attacks, Gumblar and Cyberterror

Dennis Fisher and Ryan Naraine discuss the increasing volume and sophistication of attacks on social networks, the continued rise of malware campaigns such as Gumblar and the recent news around cyberwar and cyberterror. Download SHOW NOTES: Gumblar Attacks Spread to Thousands of New Sites Report:...

Consumers Should Clean Up Their Act on Personal Security

The growing use of social networking sites is leaving PC inadvertently open to identity thieves warned Hugh Thompson, chief security strategist at People Security. Speaking at the RSA Europe Conference, Thompson said that people were unaware just how many clues they left for fraudsters. He said...

Worm Attacks Reddit

The rash of attacks on social networking sites is continuing, this time in the form of a cross-site scripting worm that is currently plaguing Reddit, the popular social bookmarking portal. The Reddit attack is interesting in that it requires a minimum of user interaction in order to spread. The...

Koobface, Twitter Attacks Growing More Sophisticated

GENEVA — The attacks and scams that have been affecting users of Facebook, Twitter and other popular social networking sites are continuing to evolve and improve, as the attackers learn more about their victims and refine their tactics, experts say. The poster child for these attacks has been the...

VB 2009: Stefan Tanase on Web 2.0 Threats and Anti-Social Networking

Digital Underground podcast with Dennis Fisher Dennis Fisher talks with Stefan Tanase, senior security researcher at Kaspersky Lab, live from Virus Bulletin 2009 about the threats on social networking sites and the privacy and security concerns presented by Web 2.0 technologies. Here are the slid...

elgg <= 1.5 (/_css/js.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= elgg dbname,$mysqldblink 48: if $simplecacheenabled || $override 49: $filename = $dataroot . 'viewssimplecache/' . md5$viewtype . $view; 51: $contents = filegetcontents$filename...

DEFCON: CSRF Attacks Made Easy

LAS VEGAS — The security of social networking sites isn’t as bad as you think. In fact, it’s much worse. Sites such as Twitter, Facebook and others that rely heavily on user-generated content, shared content and aggregation have been the targets of increasingly sophisticated attacks over the last...

Miniweb 2.0 Social Networking XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Toward Privacy-Aware OpenSocial Applications

Kun Liu from IBM Research discusses the potential for developing privacy-aware social networking applications through the measurement and monitoring of privacy risks...

Koobface Worm Infections Exploding

By Stefan Tanase, Kaspersky Lab, Romania In June, we saw an explosive rise in the number of Koobface modifications – the number of variants we detected jumped from 324 at the end of May to nearly 1000 by the end of June. And this weekend brought another flood, bringing us up to 1049 at the time o...