Facebook Page Name Change after 200+ likes

Facebook Page Name change Exploits the restriction by facebook for not to change the page name after 200 likes so here we are with a working Vulnerability to change the Page name Please do comment after or before buying our exploit for confirmation of the working of exploit This is private exploi...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 24, 2014

Medium Alert ID: 32566 First Published: 2014 January 24 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 6, 2014

Medium Alert ID: 32329 First Published: 2014 January 6 21:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice confirmation notification for the recipient. The text in the email message attempts to convince the...

HackerOne: CSRF login

1 Attacker creates a fake account and changes e-mail 2 The e-mail confirmation link can now be used to CSRF login someone into the fake account, then monitor actions performed by the victim or even interact with him...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Email Messages on December 9, 2013

Medium Alert ID: 32083 First Published: 2013 December 9 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank payment confirmation slip for the recipient. The text in the email message attempts to convince the...

Bug Allows Apps to Bypass Android Security Locks

There is a vulnerability in Android 4.3 Jelly Bean that enables a malicious app to disable all of the security locks on a given device, leaving it open to further attacks. Jelly Bean is the most widely deployed version of Android right now. The vulnerability in Android exists in the way that the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on November 18, 2013

Medium Alert ID: 31816 First Published: 2013 November 19 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on November 15, 2013

Medium Alert ID: 31787 First Published: 2013 November 15 21:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

CVE-2013-5726

Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of 1 follow or 2 favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL...

Design/Logic Flaw

Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of 1 follow or 2 favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL...

Tweetbot Lack Of User Confirmation

Affected Vendor: http://tapbots.com/ - Affected Software: Tweetbot for Mac, iPad and iPhone - Affected Version: Mac: 1.3.3 - iPad: 2.8.5 - iPhone: 2.8.5 - Issue Type: Lack of user confirmation leading to Twitter action revealing the user's Twitter identity - Release Date: November 1, 2013 -...

Threat Outbreak Alert: Fake Payment Confirmation Notification Email Messages on October 17, 2013

Medium Alert ID: 31360 First Published: 2013 October 18 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on October 7, 2013

Medium Alert ID: 31146 First Published: 2013 October 7 14:26 GMT Last Updated: 2013 October 8 14:09 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message...

Byword 2.x File Overwrite Vulnerability

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL. Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iO...

CVE-2013-2269

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

Design/Logic Flaw

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

CVE-2013-2269

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

CVE-2013-5725

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...

[CVE-2013-5725] - Byword for iOS Data Destruction Vulnerability

Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iOS - Affected Version: 2.x prior to 2.1 - Issue Type: Lack of validation/user confirmation leading to destruction of data - Release Date: 29 Sept 2013 - Discovered by: Guillaume Ross - CVE Identifier: CVE-2013-5725 - Issue...

Cross site scripting

Cross-site scripting XSS vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form...