X (Formerly Twitter): View liked twits of private account via publish.twitter.com

https://publish.twitter.com/?url=https://twitter.com/privateaccountid/likes POC: Private account https://twitter.com/testprivateacc1 https://publish.twitter.com/?url=https://twitter.com/testprivateacc1/likes...

Twitter: Circumventing the Twitter account lockout process [ACCOUNT TAKEOVER]

Ullger found a method to bypass our security control requiring compromised accounts to verify their details such as an email address & phone number. An attacker could have used this vulnerability with a stolen username & password in order to gain access to a user's account. In my testing, I found...

Dup Scout Enterprise 9.0.28 Buffer Overflow

!/usr/bin/python print "Dup Scout Enterprise 9.0.28 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM You do not need to be authenticated, password below is...

Dup Scout Enterprise 9.0.28 - Login Remote Buffer Overflow

Dup Scout Enterprise 9.0.28 - Login Remote Buffer Overflow !/usr/bin/python print "Dup Scout Enterprise 9.0.28 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYST...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'Windows Capcom.sys Kernel Execution Exploit x64 only',...

Disk Pulse Enterprise 9.0.34 - Login Remote Buffer Overflow

Disk Pulse Enterprise 9.0.34 - Login Remote Buffer Overflow !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

Radancy: Facebook and twitter page claimed of maximum.com [important]

Maximum uses these 2 links for their users to follow: twitter.com/MaximumEMG facebook.com/MaximumEMG Mostly maximum.nl redirects to maximum.com , so I thought it is important to tell you about this.Since it is risky for users. Steps To Reproduce: Visit maximum.com they may be used in many place...

Data Exfiltration Toolkit: DET

Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/live data. The id...

X (Formerly Twitter): Twitter iOS fails to validate server certificate and sends oauth token

Twitter on iOS newest two versions 6.62 and 6.62.1 are affected, other versions not tested. Tested independently on two different iPhone 6 with iOS version 9.3.3 and 9.3.5 without Jailbreak. The iPhone were without any mobileconfig profiles installed - no we did not install any CA certificate in...

Announcing the Third Annual Flare-On Challenge

Let fall be the season for reverse engineering! On Sept. 23, 2016, the FireEye Labs Advanced Reverse Engineering FLARE team will be hosting its third annual Flare-On reverse engineering contest with a designated start time of 8pm ET. This is a CTF-style challenge for all active and aspiring rever...

Announcing the Third Annual Flare-On Challenge

Let fall be the season for reverse engineering! On Sept. 23, 2016, the FireEye Labs Advanced Reverse Engineering FLARE team will be hosting its third annual Flare-On reverse engineering contest with a designated start time of 8pm ET. This is a CTF-style challenge for all active and aspiring rever...

X (Formerly Twitter): [Studio.twitter.com] See someone else pics

Hi Team, Below URL is missing authorisation where user A who is not having access to user B's data is able to view the video/pics by user. Vulnerable request: GET /1/library/list.json?accountid=4503599659510351&ownerid=12&limit=20&offset=0 HTTP/1.1 Host: studio.twitter.com User-Agent: Mozilla/5.0...

JVN#94816361: YoruFukurou (NightOwl) vulnerable to denial-of-service (DoS)

YoruFukurou NightOwl is a Twitter client application for OS X. YoruFukurou uses OS X API CTFramesetter to render text contents. CTFramesetter has a problem in processing a certain emoji character sequence, which may cause YoruFukurou to crash. This problem was verified on OS X v10.9 Mavericks. Th...

Kodi Web Server 16.1 - Denial of Service

Exploit Title: Kodi 16.1 Web Server Remote DoS Date: 06/08/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: https://kodi.tv/ Software Link:...

Pokémon GO Creator's Twitter Account Hacked — Pika, Pikaaaa!

Twitter account of another high-profile CEO has been hacked! This time, it's Niantic CEO John Hanke, the developer behind the world's most popular game Pokémon GO. And it seems like Hanke is so busy with its newly launched game Pokémon GO that he hasn't noticed or took any measures against it eve...

X (Formerly Twitter): Stealing User emails by clickjacking cards.twitter.com/xxx/xxx

Hello In twitter you can create cards to generate leads. For example: https://twitter.com/i/cards/tfw/v1/759046372544741376?cardname=promotion&autoplaydisabled=true&earned=true&lang=en&cardheight=357 If you visit the above URL and click the button your email and username is sent to my domain. Sin...

Hackers can use Docker vulnerability download Twitter Vine the full source code-bug warning-the black bar safety net

! Guess what? That someone turned out to be the Twitter Vine's complete source code download down. Vine is a short video share service,users can use Vine to share a six-second video clips,and seamlessly embedded into Twitter messages. With other video sharing service is different,Vine support...

X (Formerly Twitter): csp bypass + xss

Hi, On my previous report number 126464 I've mentioned that analytics.twitter.com has a CSP bypass which I couldn't exploit that time. Now, I've found a reflected XSS on careers.twitter.com which again I couldn't exploit by itself. Because you have CSP, and I've combined two of them to successful...

Hacker Downloaded Vine's Entire Source Code. Here’s How...

Guess What? Someone just downloaded Twitter’s Vine complete source code. Vine is a short-form video sharing service where people can share 6-second-long looping video clips. Twitter acquired the service in October 2012. Indian Bug bounty hunter Avinash discovered a loophole in Vine that allowed h...

Apple Fixes Vulnerabilities Across OS X, iOS, Safari

Apple fixed dozens of vulnerabilities in its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS. The OS X update graduates the desktop and server operating system to OS X El Capitan v10.11.6 and applies to anyone running OS X...