3291 matches found
Taylor Swift's Twitter and Instagram Accounts Hacked
The very popular Pop star Taylor Swift became the latest celebrity to have their social media accounts hacked on Tuesday. The 25-year-old "Shake It Off" singer, who has the fourth-most popular Twitter account with 51.4 million followers, appeared to be asking her millions of followers to follow...
X (Formerly Twitter): URGENT - SUBDOMAIN TAKEOVER ON TWITTER ACQ.
Hello Twitter Security Team, I reccomend you to read this report with the maximum attention! This is the same isse that you ever see here: https://hackerone.com/reports/42236 and here https://hackerone.com/reports/32825. Well ,now, the acquisition where I found this domain is: trendrr.tv..Before...
X (Formerly Twitter): Flaw in login with twitter to steal Oauth tokens
Hey hi, Steps to reproduce: ============================================= I have been testing the twitter kit in fabric. I added login with twitter integration to my application. I pushed the application to my android phone , clicked login with twitter. entered my username and password. Searched ...
X (Formerly Twitter): Path disclosure in platform0.twitter.com
Hi Twitter, I am going to disclose a vulnerability which I’ve found in platform0.twitter.com , hoping this will make Twitter more secure place. - Vulnerability Class: Path Disclosure - Proof of Concept : - Link : https://platform0.twitter.com - you must use https instead of http to reproduce POC ...
X (Formerly Twitter): twitter android app Fragment Injection
com.twitter.android.WidgetSettingsActivity extend PreferenceActivity and export. By entering the appropriate extra intent can call any of its internal fragment. So do not export com.twitter.android.WidgetSettingsActivity...
CVE-2015-0016
Directory traversal vulnerability in the TS WebProxy aka TSWbPrxy component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted...
WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Twitter LiveBlog plugin is a plugin for dynamic posting of articles or tweets. The WordPress plugin Twitter LiveBlog cross-site request...
X (Formerly Twitter): No rate limiting on creating lists
Hi No rate limiting on creating lists in twitter account hope you guys understand...
CVE-2014-9398
Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 idptttwitterusername or 2 idptttweetprefi...
CVE-2014-9398
Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...
CVE-2014-9398
The CVE-2014-9398 entry concerns the WordPress Twitter LiveBlog plugin (versions 1.1.2 and earlier). The vulnerability is a CSRF flaw that allows an attacker to hijack an administrator’s authenticated session to perform actions that may enable XSS via the mashtlb_twitter_username parameter in twi...
CVE-2014-9398: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...
CVE-2014-9393: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 idptttwitterusername or 2 idptttweetprefi...
Lazarus Guestbook 1.22 XSS / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Lazarus Guestbook 1.22 Multiple Persistent Cross-Site Scripting - Sql Injection Vulnerability Date: 23/12/2014 Url Vendor:...
X (Formerly Twitter): POODLE Bug: 199.16.156.44, 199.16.156.108, mx4.twitter.com
Hi! Looks like there is SSLv3 Padding Oracle vuln on: 199.16.156.44, 199.16.156.108, mx4.twitter.com...
WordPress Twitter 0.7 CSRF / XSS
Title: CSRF / Stored XSS Vulnerability in Post to Twitter Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9393 Plugin Homepage: https://wordpress.org/plugins/post-to-twitter/ Version Affected: 0.7 probably lower versions Severity: High Description: Vulnerable Parameter: all three fields, to...
WordPress Twitter LiveBlog 1.1.2 CSRF / XSS
Title: CSRF / Stored XSS Vulnerability in Twitter LiveBlog Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9398 Plugin Homepage: https://wordpress.org/plugins/twitter-liveblog/ Version Affected: 1.1.2 probably lower versions Severity: High Description: Vulnerable Parameter:...
