Feeling Heat Facebook Adds Google+ Like Privacy Controls

History has taught us that monopolies are bad for consumers. It was true in the first decades of the 20th century with Standard Oil, and in the final decade of the same century with Microsoft. Its been true, in recent years, with social networking behemoth, Facebook, also. But now, with Google’s...

Hacking a Facebook Account using Facebook

Hacking a Facebook Account using Facebook Many of us know that phishing is also a trick to hack a facebook and session hijicking but hacker can do both at a same time. This vulnerability was happened on Facebook static FBML .Example here . Here you can get that Facebook FBML script :...

Hacking a Facebook Account using Facebook

Hacking a Facebook Account using Facebook Many of us know that phishing is also a trick to hack a facebook and session hijicking but hacker can do both at a same time. This vulnerability was happened on Facebook static FBML .Example here . Here you can get that Facebook FBML script : What user wi...

Zynga Vampiresgame Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| Author: r007k17-w a.k.a Raghavendra Karthik.D Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2010 Zynga Game Network Inc...

Zynga Petville Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| SUG: HTML encoding, escaping special characters,Input sanitization...

Zynga Cafeworld Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| alert"r007k17-w" SUG: HTML encoding, escaping special characters,Input sanitization...

WordPress Facebook Promotions 1.3.3 SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id...

WordPress Facebook Promotions Plugin <= 1.3.3 - SQL Injection

Facebook Promotions plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

Mambo 4.6.5 CSRF Vuln (Change Admin Password)

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...

Twitter Advances Ever So Slowly Toward Total Adoption of HTTPS

Twitter is at the beginning of a process that will eventually make HTTPS browsing a default feature on the popular micro-blogging platform. The company currently is experimenting by turning HTTPS on for a small percentage of users. Enabling HTTPS means that all communications between users and...

Facebook SmarterMind - SQL Injection Vulnerability

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability Release Date: ============= 2011-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 44 Product & Service Introduction: =============================== This application is currently includ...

Facebook SmarterMind - SQL Injection Vulnerability

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability Release Date: ============= 2011-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 44 Product & Service Introduction: =============================== This application is currently includ...

25 Year old UK Student hacker penetrated Facebook‎

25 Year old UK Student hacker penetrated Facebook‎ A 25 year old Brit allegedly used "considerable technical expertise" to hack into Facebook's servers. The student, from York, faces five charges, including that he "made, adapted, supplied or offered to supply" a computer program to hack into a...

25 Year old UK Student hacker penetrated Facebook‎

25 Year old UK Student hacker penetrated Facebook‎ A 25 year old Brit allegedly used "considerable technical expertise" to hack into Facebook's servers. The student, from York, faces five charges, including that he "made, adapted, supplied or offered to supply" a computer program to hack into a...

Facebook: You Should Only Friend People You Know. Seriously. We're Not Kidding.

After a string of controversies over promiscuous data sharing and account takeovers, social networking giant, Facebook, has released a 13 page guide for users who want to secure their Facebook account. Among other things, the 700 million strong social network is warning its users to only “Friend”...

Facebook SmarterMind - SQL Injection Vulnerability [HD]

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/249.wmv View: http://www.youtube.com/watch?v=4k7jbDOnB4 Release Date: ============= 2011-08-17 Vulnerability Laboratory ID VL-I...

Facebook SmarterMind - SQL Injection Vulnerability [HD]

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/249.wmv View: http://www.youtube.com/watch?v=4k7jbDOnB4 Release Date: ============= 2011-08-17 Vulnerability Laboratory ID VL-I...

Samsung Hires Android Hacker, Steve "Cyanogen" Kondick

Samsung Mobile has hired the prolific and well-known Android hacker, Steve Kondik, perhaps better known by his Web-persona, Cyanogen. Tech blog, Endgadget, was the among the first to report the news after a slew of readers sent them links to Kondick’s Facebook page, where his employment status ha...