Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...

Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...

Facebook BugBounty #2 - Persistent Web Vulnerability

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/277.wmv View: http://www.youtube.com/watch?v=RkWDcZNjZpg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=239 Release...

Facebook BugBounty #2 - Persistent Web Vulnerability

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/277.wmv View: http://www.youtube.com/watch?v=RkWDcZNjZpg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=239 Release...

Droidsheep : Android Application for Session Hijacking

Droidsheep : Android Application for Session Hijacking Droidsheep is free alternate of faceniff which is available on download droidsheep website for free. Its one click hijacking tool which supports Amazon.de facebook.com flickr.com twitter.com linkdein.com yahoo.com live.com google.de only the...

File And Mp3 Tag Renamper Local Bufer Overflow(SEH)

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: File And Mp3 Tag Renamper Local Bufer OverflowSEH Author: Angel Injection Thanks: r0073r // Sid3^effects // r4dc0re // CrosS || Inj3ct0r Team || "SeeMe" // XroGuE // gunslinger // indoushka // KnocKout // ZoRL...

FBPwn : A Cross-Platform Facebook Profile Dumper tool

FBPwn : A Cross-Platform Facebook Profile Dumper tool FBPwn is an open source, cross-platform, Java based Facebook profile dumper. It can send friend requests to a list of Facebook profiles, and poll for their acceptance notification. Once the victim accepts the invitation, it dumps all their...

FBPwn : A Cross-Platform Facebook Profile Dumper tool

FBPwn : A Cross-Platform Facebook Profile Dumper tool FBPwn is an open source, cross-platform, Java based Facebook profile dumper. It can send friend requests to a list of Facebook profiles, and poll for their acceptance notification. Once the victim accepts the invitation, it dumps all their...

Mp3 Cutter Joiner Local Buffer Overflow

Exploit for windows platform in category local exploits / Exploit Title: Mp3 Cutter Joiner Local Buffer Overflow Author: Angel Injection Date: /9/9/2011 Grups Inj3ct0r: http://www.facebook.com/groups/Inj3ct0r.Team/ Thanks to : Inj3ct0r Team sec-krb.org team / include include define pausescreen...

Department of Homeland Security warns Anonymous Hackers

Department of Homeland Security warns Anonymous Hackers The Department of Homeland Security is beginning to take Anonymous and other non-professional cyber-attackers more seriously as it issues a warning about potential attacks. The 2 September security bulletin from the DHS National Cyber-Securi...

Department of Homeland Security warns Anonymous Hackers

Department of Homeland Security warns Anonymous Hackers The Department of Homeland Security is beginning to take Anonymous and other non-professional cyber-attackers more seriously as it issues a warning about potential attacks. The 2 September security bulletin from the DHS National Cyber-Securi...

WordPress Facebook Opengraph Meta Plugin <= 1.0 - SQL Injection

Facebook Opengraph Meta plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Facebook Opengraph Meta Plugin plugin <= 1.0 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if $page...

WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection

WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if...

WordPress Facebook Opengraph Meta 1.0 SQL Injection

Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if $page $totalpages $page=$totalpages; $start = $limit$page -...

WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection

Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if $page $totalpages $page=$totalpages; $start = $limit$page -...

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious? ' Albanian Hacker One of the most famous games over the world Battlefield Heroes which is created by EA Games is hacked by a new hacker named "Why So Serious? ". The hacker is from Albania. He made a post on Battlefield Heroes site ...

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker One of the most famous games over the world Battlefield Heroes which is created by EA Games is hacked by a new hacker named "Why So Serious?". The hacker is from Albania. He made a post on Battlefield Heroes site &...

TinyWebGallery 1.8.4 SQL Injection / Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Facebook Pays Out $40,000 in Bug Bounties in First Month

Just a month into its cash-for-bugs program, social networking giant Facebook doled out some $40,000 in bounties to researchers from 16 countries, according to a company statement. Joe Sullivan, Facebook’s Chief Security Officer, authored a column on Facebook’s security page yesterday heralding t...