Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

Facebook OAuth flaw allows gaining full control over any Facebook account

Facebook OAuth is used to communicate between Applications & Facebook users, to grant additional permissions to your favorite apps. To make this possible, users have to 'allow or accept' the application request so that app can access your account information with required permissions. As a normal...

Facebook OAuth flaw allows gaining full control over any Facebook account

Facebook OAuth is used to communicate between Applications & Facebook users, to grant additional permissions to your favorite apps. To make this possible, users have to 'allow or accept' the application request so that app can access your account information with required permissions. As a normal...

Malware attack on Apple employees by hackers who targeted Facebook

The same ring of hackers that are responsible for hacking into at least 40 companies including Facebook and Twitter are reportedly also infected the computers of some Apple employees, the company acknowledged Tuesday. The purpose of hack considered an effort to steal company secrets, research and...

Malware attack on Apple employees by hackers who targeted Facebook

The same ring of hackers that are responsible for hacking into at least 40 companies including Facebook and Twitter are reportedly also infected the computers of some Apple employees, the company acknowledged Tuesday. The purpose of hack considered an effort to steal company secrets, research and...

Apple Breached by Facebook Hackers Using Java Exploit

Apple is the latest major American company to enter the security confessional and disclose it has been breached. The company told Reuters today it was attacked by the same crew that hit Facebook, which disclosed its breach last Friday, and that like the social media giant, no data had been stolen...

Facebook hacked in Zero-Day Attack

Facebook operator of the largest social network with more than 1 billion members, said on Friday it had been the target of an unidentified hacker group, but that no user information was compromised during the attack. The attack occurred when a handful of the company's employees visited a...

Facebook Says Employee Laptops Compromised in 'Sophisticated' Attack

Laptops belonging to several Facebook employees were compromised recently and infected with malware that the company said was installed through the use of a Java zero-day exploit that bypassed the software’s sandbox. Facebook claims that no user data was affected by the attack and says that it ha...

Facebook hacked in Zero-Day Attack

Facebook operator of the largest social network with more than 1 billion members, said on Friday it had been the target of an unidentified hacker group, but that no user information was compromised during the attack. The attack occurred when a handful of the company's employees visited a...

iRobosoft Internet Browser Memory Corruption

Exploit for windows platform in category dos / poc Title : iRobosoft Internet Browser Memory Corruption Date: 2013-02-18 Softwares Link: http://sourceforge.net/projects/internetbrowser/ phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home: http://www.1337day.net Greeting ...

CVE-2011-5257

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

CVE-2011-5257

Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...

Windows Media Player 9.0.0 Local Proof Of Concept Exploit

Exploit for windows platform in category dos / poc Title : Windows Media Player 9.0.0 Local Proof Of Concept Exploit Date: 2013-01-12 Software Link: http://windows.microsoft.com/fr-FR/windows/windows-media-player phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home:...

Syrian Electronic Army Hijack Sky News's Twitter & Facebook Accounts

Syrian Electronic Army strike again! This time hacking group hijack Twitter accounts and a Facebook page of Sky News Arabia and also hack their Emails. The accounts affected were the channel's main twitter handle @skynewsarabia and the @skynewsarabia account used for cultural and entertainment...

VK Social Network Open Redirect

Exploit Title :VK social network URL Redirector Abuse Vendor: www.vk.com Author: Juan Carlos Garca NightSec Blog: http://hackingmadrid.blogspot.com Facebook http://www.facebook.com/pages/ETHICAL-HACKING-Y-OL%C3%89-by-the-Face-WhiteHat/172393869485449?sk=app190322544333196 BREIF DESCRIPTION VK...

Bicololo malware spreading via 404 Error targeting Russians

A Trojan that attacks Russian Internet users using a new trick to spread itself. Known as "Bicololo" was first discovered in October 2012 and specially designed to steal login credentials from users. For this, the malware modify the system Hosts file i.e etc/hosts to host perfect phishing sites v...

Wordpress plugin dynamic-font-replacement-4wp Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress plugin dynamic-font-replacement-4wp Arbitrary File Upload /FPD Vulnerability Date: 21/01/2013 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Category : webapps Dork :...

Facebook Privacy Vulnerability Create Private Messages from Anyone

Facebook's DMARC fail! Facebook Privacy Vulnerability! This is private exploit. You can buy it at https://0day.today...

Wordpress plugin wp-homepage-slideshow Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...