CVE-2015-4413

The CVE-2015-4413 entry concerns the Nextend Facebook Connect WordPress plugin. A Cross-Site Scripting (XSS) vulnerability exists in the new_fb_sign_button function in nextend-facebook-connect.php that allows injection of arbitrary web script or HTML via the redirect_to parameter. Affected versio...

CVE-2015-4413

Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...

Facebook Helps Combat Apple XARA Vulnerabilities With Osquery

Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...

Do You also want to Hack Facebook Account of your Girlfriend?

We at The Hacker News get a lot of requests via emails and messages from people who want to hack into someone else’s Facebook account or Gmail account or break into somebody’s network. However, 80 to 90 percent requests we receive every day are from people who want to hack into their girlfriend,...

Beware! Facebook UnfriendAlert Software Steals Your Account Password

Today everybody wants to know — Who visited my Facebook profile?, Who unfriended me from the Facebook Friend list?, Who saw my Facebook posts?, and many other features that isn't provided by Facebook by default. So most Facebook users try to find out a software and fall victim to one that promise...

Dennis Fisher and Mike Mimoso on Facebook's Security Moves, GitHub's Audit and More

Dennis Fisher and Mike Mimoso discuss Facebook’s moves toward encrypted notifications and SHA-2 usage, the audit of GitHub SSH keys and the awesome OpenSesame garage door hack from Samy Kamkar. Download: digitalunderground206.mp3 Music by Chris Gonsalves...

Seagate Central 2014.0410.0026-F Remote Facebook Access Token Exploit

Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.ser and this exploit takes advantage of two bugs - Passwordless root login via FTP to retrieve archiveaccounts.ser file which contains access tokens and reuses the unencrypted and unprotected -rw-r--r-- access...

Seagate Central Remote Facebook Access Token

!/usr/bin/python seagatecentralfacebook.py Seagate Central Remote Facebook Access Token Exploit Jeremy Brown jbrown3264/gmail May 2015 -Synopsis- Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.ser and this exploit takes advantage of two bugs: 1 Passwordless...

Facebook Requires SHA-2 Support as of Oct. 1, 2015

Facebook has put developers on notice that as of Oct. 1, apps that do not support SHA-2 will no longer connect to its network. With Tuesday’s announcement, the tech giant has fallen in line alongside Google, Mozilla and Microsoft in deprecating the SHA-1 and older hash algorithms. “These changes...

Unity Web Player Zero-Day Vulnerability Disclosed

Some detail has been disclosed about a zero-day vulnerability in the Unity Web Player browser plugin that can allow an attacker to use a victim’s credentials to read messages or otherwise abuse their access to online services. The partial disclosure was made after nearly six months of bug-report...

Seagate Central 2014.0410.0026-F - Remote Facebook Access Token

!/usr/bin/python seagatecentralfacebook.py Seagate Central Remote Facebook Access Token Exploit Jeremy Brown jbrown3264/gmail May 2015 -Synopsis- Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.ser and this exploit takes advantage of two bugs: 1 Passwordless...

Seagate Central 2014.0410.0026-F - Remote Facebook Access Token

Seagate Central 2014.0410.0026-F - Remote Facebook Access Token !/usr/bin/python seagatecentralfacebook.py Seagate Central Remote Facebook Access Token Exploit Jeremy Brown jbrown3264/gmail May 2015 -Synopsis- Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.se...

Facebook Adds PGP Encryption Feature to Email

Facebook announced early Monday that the social network is in the process of adopting OpenPGP encryption and that it will give privacy conscious users the ability to post their public keys on their profile. The feature, which is gradually rolling out to users today, should better lock down messag...

New Facebook feature Encourages users to use PGP for Encrypted Communications

In this era of Global surveillance, we all are worried about the privacy of our communication and sensitive data. There is no guarantee that our data is not being snooped on, but there is a solution — PGP Pretty Good Privacy. PGP Pretty Good Privacy is more than 20 years old technology but is yet...

This Facebook Hack Allows You to Track Your Friends On Map

Remember the magical Marauder’s Map from the Harry Potter books that reveal the whereabouts of characters as they roam classrooms and the halls of Hogwarts school? A student developer from Cambridge has created a Chrome extension that works similar and also named it Marauder’s Map. The extension...

Google to Introduce New Photo-Sharing Platform to Kill Instagram

Google is reportedly going to launch a new online photo-sharing service and storage option at its developer conference later this month, which Bloomberg says, will not be a part of its Google+ social network. At the moment, Google offers a photo sharing service known as "Google+ Photos," which...

WordPress Add Link to Facebook Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. add Link to Facebook is one of the plugin to automatically add links to Facebook. An HTML injection vulnerability exists in the WordPress Add Link to...

Gamification of Facebook Messenger... New feature Coming Soon

Good news for Gamers! Users of Facebook Messenger may soon be able to play games on the messaging platform. Nearly two months ago, Facebook launched its Messenger platform, inviting developers to create apps that allow you to send and receive GIFs, sound clips, and other artistic creations within...

Facebook Filter Evasion / Open Redirect

Document Title: =============== Facebook 26 - Filter Bypass & Exception Handling Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1483 http://www.vulnerability-lab.com/getcontent.php?id=1484 Video View:...

Google Analytics by Yoast stored XSS #2

OVERVIEW ========== Google Analytics by Yoast is one of the most popular WordPress plug-ins with over 7 million downloads and "1+ million" active installs. Last month Yoast patched a stored XSS we reported in the plug-in. Shortly after this we identified another bug of a similar severity. The...