3745 matches found
CVE-2013-4593
RubyGem omniauth-facebook has an access token security vulnerability...
CVE-2013-4593
RubyGem omniauth-facebook has an access token security vulnerability...
CVE-2013-4593
CVE-2013-4593 concerns the RubyGem omniauth-facebook. The connected sources describe a flaw where the access token can be transmitted via the URL, enabling a remote attacker to bypass authentication and impersonate another user. This results in an authentication bypass vulnerability within the om...
nopCommerce Elevation of Privilege Vulnerability
nopCommerce is an open source e-commerce shopping cart software. nopCommerce 4.2.0 suffers from an elevation of privilege vulnerability that can be exploited by an attacker with the help of a specially crafted Facebook Auth plugin...
CVE-2019-19684
nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin...
CVE-2019-19684
nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin...
Privilege escalation
nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin...
CVE-2019-19684
CVE-2019-19684 affects nopCommerce v4.2.0, enabling privilege escalation via file upload through Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs (Admin/FacebookAuthentication/Configure) by uploading a crafted Facebook Auth plugin. Root cause: insecure file upload in the PluginCon...
CVE-2019-19684
nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin...
A week in security (December 2 – December 8)
Last week on Malwarebytes Labs, we took a look at a new version of the IcedID Trojan, described web skimmers up to no good, and took a deep dive into containerization. We also explored a report bringing bad news for organizations and insider threats, and threw a spotlight on a video game phish...
Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents
Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...
Facebook Alleges Company Infiltrated Thousands for Ad Fraud
Facebook has sued a Chinese company that it alleges used malware to compromise hundreds of thousands of user accounts – and then used them to run “deceptive ads” promoting counterfeit goods. The company in question is Hong Kong-based ILikeAd Media International Company Ltd., which was incorporate...
Facebook Sued Hong Kong Firm for Hacking Users and Ad Fraud Scheme
Following its efforts to take legal action against those misusing its social media platform, Facebook has now filed a new lawsuit against a Hong Kong-based advertising company and two Chinese individuals for allegedly abusing its ad platform to distribute malware and Ad fraud. Facebook filed the...
Facebook Sued Hong Kong Firm for Hacking Users and Ad Fraud Scheme
Following its efforts to take legal action against those misusing its social media platform, Facebook has now filed a new lawsuit against a Hong Kong-based advertising company and two Chinese individuals for allegedly abusing its ad platform to distribute malware and Ad fraud. Facebook filed the...
Facebook Proxygen Resource Management Error Vulnerability
Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A resource management error vulnerability exists in Facebook Proxygen versions v0.29.0 through v2017.04.03.00. The vulnerability stems from the mismanagement of system resources e.g., memory, disk...
Facebook HHVM Buffer Overflow Vulnerability (CNVD-2020-02572)
Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A buffer overflow vulnerability exists in Facebook HHVM. The vulnerability stems from a network system or product performing operations in memor...
Facebook Mcrouter Multiple Denial of Service Vulnerabilities
Description Facebook Mcrouter is prone to multiple denial of service vulnerabilities. An attacker can exploit these issues to cause a denial of service condition. Technologies Affected Facebook Mcrouter 0.1.0 Facebook Mcrouter 0.10.0 Facebook Mcrouter 0.20.0 Facebook Mcrouter 0.30.0 Facebook...
New Facebook Tool Let Users Transfer Their Photos and Videos to Google
Facebook has finally started implementing the open source data portability framework as the first phase of 'Data Transfer Project,' an initiative the company launched last year in collaboration with Google, Apple, Microsoft, and Twitter. Facebook today announced a new feature that will allow its...
New Facebook Tool Let Users Transfer Their Photos and Videos to Google
Facebook has finally started implementing the open source data portability framework as the first phase of 'Data Transfer Project,' an initiative the company launched last year in collaboration with Google, Apple, Microsoft, and Twitter. Facebook today announced a new feature that will allow its...
SDKs Misused to Scrape Twitter, Facebook Account Info
Twitter and Facebook are warning of software development kits SDKs that could be embedded within a mobile application and used to harvest personal user information. The SDKs, which the tech giants said are maintained by oneAudience and MobiBurn, could be used by mobile app developers to craft...