How-To Video: Facebook Privacy

In the previous video in our how-to series, Securing Facebook, we reported that the social networking giant was rapidly approaching one billion active users. Facebook has since surpassed that mark. Considering that, we produced a video detailing and explaining how to implement some simple, built-...

Tunisians Voice - Nawaat Portal hacked

Kosova Warriors Group deface a subdomain https://events.nawaat.org/ of Nawaat Portal.. Its an independent collective blog hosted by Tunisians. It gives a voice to all those who, through their civic engagement, take the cover and spread. Our editorial decisions are guided by among other concerns...

Eugene Kaspersky Chats With Facebook Users About Malware, Cybercrime and Piracy

Hi, folks! For the last two weeks each and every fan of official Kaspersky Lab Facebook pages worldwide had the chance to ask our CEO, Eugene Kaspersky, anything at all and we must say that some of our fans took this literally: Thank you for the hundreds of great questions! There’s nothing more...

Anonymous Threatens to Shutdown Facebook - Dude, do you have any Idea ?

Do you believe that it is possible to shut down Facebook with a cyber attack on 5th November 2012, which is not even organised in a proper way ? Few activists on internet threatened to shut down Zynga and Facebook, after the gaming giant announced it was laying off five per cent of its work force...

Wordpress Plugin Facebook Survey v1 SQL Injection Vulnerability

Exploit for php platform in category web applications Wordpress Facebook Survey v1 - SQL Injection Vulnerability Introduction: ============= Wordpress Facebook Survey Pro is an easy to install & use Wordpress plugin. Get started right away, and set up as many timeline optin pages as you want. Thi...

Facebook Privacy Flaw exposed two College Gay Students Accidentally

Facebook is continually changing its privacy settings, trying to give users more control over what they want to share and with whom. Two gay college students were outed on Facebook because of a privacy flaw in Facebook Groups. Users can be added to Facebook Groups by friends without the user's...

Microsoft Windows Media Player 10 - '.avi' Integer Division By Zero Crash (PoC)

!/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title : Windows Media Player 10 - .avi Integer Division By Zero Vulnerability Auth...

Dorkbot Now Worming Its Way through Skype

The Dorkbot worm that fooled many a Facebook and Twitter user is now socially engineering Skype users into downloading the malware, whose payload now includes a mechanism to lock down machines. Various antivirus and security companies are reporting the latest iteration rummages through an infecte...

site2host (cms.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: site2host cms.php SQL Injection Vulnerability Date: 08-10-2012 Author: Mouh Marvel-Dz Facebook : http://www.facebook.com/mouh.marvel Category: webapps Google dork: intext:"designed by site2host.com" inurl:cms.php?catid= Tested o...

Android Mobile 2.6.xxx Dos Vulnerability & Facebook App Crash Poc

Exploit for hardware platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

New Twitter-Based Malware Uses Direct Messaging to Spread

Sophos is warning of a new trick to get Twitter users to open direct messages from trusted users that ultimately infect their machines with malware. In a blog post, senior technology consultant Graham Clulely said the initial message is a tweet claiming the recipient’s been captured on a Facebook...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

CVE-2011-5190

Social Book Facebook Clone 2010 has XSS vulnerabilities via PATH_INFO in multiple PHP scripts (signup.php, lostpass.php, login.php, index.php, help_tos.php, help_contact.php, help.php). The description states remote attackers can inject arbitrary web script or HTML, indicating an input sanitizati...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

How-To Video: Securing Facebook

Facebook’s active-user count is rapidly approaching one billion. The world’s largest social network, which has long been a popular target and platform for attackers, will only become a more relevant outlet for scams and other fraud as it continues to grow. While the target grows, so too does the...

Auxilium PetRatePro SQL Injection / Shell Upload

Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address 2-SQL Injection viewcomments.php parameter phid...

Foxit Reader < 5.4 Trojan DLL Injection

The version of Foxit Reader installed on the remote Windows host is prior to 5.4. It is, therefore, affected by a flaw in the Facebook Plugin facebookplugin.fpi due to how dynamic-link library DLL files are located and loaded. A local attacker can exploit this issue, via a crafted Trojan horse DL...

Disqus SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Disqus sql injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://disqus.com/ Category : webapps Google dork: intext:powered by disqus...

Attraction Website Design SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Attraction Website Design sql injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://www.attractweb.com/ Category : webapps Google dork: Site by Attracti...