3294 matches found
CVE-2011-3614: Undefined Security Weakness
An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9...
JhoneRAT: Cloud based python RAT targeting Middle Eastern countries
By Warren Mercer, Paul Rascagneres and Vitor Ventura with contributions from Eric Kuhla. Updated January 17th: the documents do not exploit the CVE-2017-0199 vulnerability. Executive Summary Today, Cisco Talos is unveiling the details of a new RAT we have identified we're calling "JhoneRAT." This...
New JhoneRAT Malware Targets Middle East
Researchers are warning of a new remote access trojan RAT, dubbed JhoneRAT, which is being distributed as part of an active campaign, ongoing since November 2019, that targets victims in the Middle East. Once downloaded, the RAT gathers information on the victims’ computers and is also able to...
X (Formerly Twitter): Bypass Password Authentication for updating email and phone number - Security Vulnerability
Summary: Additional requirement for authentication is an extra layer of security for a person's Twitter account. Instead of only entering the password at the time of log in, twitter further Introduces additional layer of security by prompting users to enter their password before attempting to...
Did Donald Trump and Iran Use Twitter to Prevent a War?
Tweets from US president Donald Trump and Iranian foreign minister Javad Zarif Tuesday offered a fascinating glimpse at how world leaders can communicate more quickly and directly than ever in times of crisis...
Facebook Cracks Down on Deepfake Videos
Facebook is banning deepfake videos, which stem from a technique of human-image synthesis based on artificial intelligence AI to create fake content. Over the past year, security experts and lawmakers have voiced concerns about malicious deepfake applications, particularly as a vessel for...
X (Formerly Twitter): lack of input validation that can lead Denial of Service (DOS)
Hi Security Team, Summary: There is no limit to the number of characters in the issue comments, which allows a DoS attack. The DoS attack affects server-side. Description On the input form of Username in https://twitter.com/settings/screenname there's no Input validation using this you can send...
X (Formerly Twitter): User input validation can lead to DOS
Hi Security Team, Summary: There is no limit to the number of characters on phone numbers and using this you can perform a DOS Attack Description: On the input form of phone number in https://twitter.com/account/complete there's no Input validation using this you can send more payload and may cau...
ghafla.com Cross Site Scripting vulnerability OBB-1053239
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Twitter Fixes Bug that Enabled Takeover of Android App Accounts
Twitter for Android users are being urged to update their app to avoid a security bug that allows a malicious user to access private account data and could also allow an attacker to take control of accounts to send tweets and direct messages. The warning comes from Twitter who said there are no...
Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts
The Epilepsy Foundation on Monday filed a criminal complaint against a number of undisclosed Twitter users after they bombarded its Twitter feed in November with a barrage of posts of flashing or strobing lights — exposing its thousands of followers to potential seizure-triggering images. The...
RTTM - Real Time Threat Monitoring Tool
Monitoring possible threats of your company on Internet is an impossible task to be achieved manually. Hence many threats of the company goes unnoticed until it becomes viral in public. Thus causing monetary/reputation damage. This is where RTTM comes into action. RTTM Real Time Threat Monitoring...
SDKs Misused to Scrape Twitter, Facebook Account Info
Twitter and Facebook are warning of software development kits SDKs that could be embedded within a mobile application and used to harvest personal user information. The SDKs, which the tech giants said are maintained by oneAudience and MobiBurn, could be used by mobile app developers to craft...
Facebook & Twitter suffer data breach via third-party developers
By Sudais Another day another breach involving Facebook, Twitter, and third-party developers. This is a post from HackRead.com Read the original post: Facebook & Twitter suffer data breach via third-party developers...
Malicious Android SDKs Caught Accessing Facebook and Twitter Users Data
Two third-party software development kits integrated by over hundreds of thousands of Android apps have been caught holding unauthorized access to users' data associated with their connected social media accounts. In a blog post published yesterday, Twitter revealed that an SDK developed by...
All Vulnerabilities for faks.mitja.ws Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| faks.mitja.ws ---|--- Open Bug Bounty...
Twitter Now Has Better Two-Factor Authentication, So Use It
A hacking bounty, right to repair, and more of the week's top security news...
QIWI: Слив какого-то access токена
An error occurred while specifying quotation mark in the GET parameter userId https://api.qiwi.me/social-networks/vk?userId=lc%27 Error contained API Token of Piggibox Application from social network VKontakte. При добавлении кавычки в GET параметр userId...
News Wrap: Voice Assistant Laser Hack, Twitter Insider Threats, Data Breach Fine Fails
Threatpost editors break down the top news stories for the week ended Nov. 8. The hot stories of the week include: Despite trillions of dollars in data-breach fine payouts, each year the number of compromised companies and individuals with private data exposed rise – a Threatpost feature looks at...
Ex-Twitter Employees Spied on Saudi Dissidents: DoJ
The Department of Justice DoJ has charged two former Twitter employees of working with the government of Saudi Arabia to snoop on political dissidents’ accounts. The 27-page complaint alleges that two former Twitter employees, Ali Alzabarah, 35, and Ahmad Abouammo, 41, accessed Twitter account da...