Facebook Login Bug Easy to Exploit

A bug in Facebook’s login system allows attackers to match unknown email addresses with users’ first and last names, even when they’ve configured their accounts to make that information private. Read the full article. The Register...

Блогер cyxymu потребовал от Медведева разобраться с хакерами

Блогер cyxymu потребовал от Медведева разобраться с хакерами Блогер cyxymu http://cyxymu.livejournal.com/ 10 августа обратился к президенту России Дмитрию Медведеву с просьбой найти организаторов DDoS-атак на ресурсы Twitter, LiveJournal и Facebook. Cyxymu предложил президенту использовать для...

Иинформация о 100 миллионах пользователей Facebook

Некий Ron Bowes сграбил всю инфу и выложил на пиратской бухте, которая не была закрыта настройками приватности. Пост на его бложеке: http://www.skullsecurity.org/blog/?p=887 BBC быстренько подсуетились раскрутили это как громадную новость Линк на торрент:...

Facebook Political Action SQL Injection

==================================================== FaceBook's servers was hacked again by Inj3ct0r Team ==================================================== Part 1 Original: http://inj3ct0r.com/exploits/11638 Part 2 Original: http://inj3ct0r.com/exploits/13403 + English translation Inj3ct0r...

Attackers Moving to Social Networks For Command and Control

Bot herders and the crimeware gangs behind banker Trojans have had a lot of success in the last few years with using bulletproof hosting providers as their main base of operations. But more and more, they’re finding that social networks such as Twitter and Facebook are offering even more fertile...

Joomla EasyBlog Cross Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

Joomla! Component EasyBlog - Persistent Cross-Site Scripting

Joomla! Component EasyBlog - Persistent Cross-Site Scripting Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Facebook вводит функцию жалобы на педофилов

Администрация Facebook предоставит пользователям возможность с помощью специальной кнопки пожаловаться на подозрительные действия пользователей социальной сети. Все тревожные сообщения будут пересылаться непосредственно в европейский Центр онлайн-безопасности и защиты детей от эксплуатации Child...

Facebook Employees Crack Admin Security

Senior engineers at Facebook responsible for SRE site reliability engineering challenged Facebook employees to try to compromise him and gain access to Facebook’s administrative system via information obtained from him. They succeeded. Read the full article. TechCrunch...

Facebook Improves User Privacy Controls

In a move hailed by privacy advocates, Facebook deployed a feature that allows its users to better control what personal information can be accessed by third-party applications and websites. Read the full article. The Register...

Myspace Clone 2010 Cross Site Scripting / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

MySpace Clone 2010 Multiple Vulnerabilies

Exploit for php platform in category web applications ========================================= MySpace Clone 2010 Multiple Vulnerabilies ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Social Community Script Authentication Bypass

Exploit for php platform in category web applications ============================================= Social Community Script Authentication Bypass ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Facebook Fixes Email Indexing Bug

Incident-prone social network monolith Facebook has plugged yet another security leak, this time involving the indexing by search engines of email addresses not listed on Facebook. Read the full article. The Register...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

Facebook Developer Verification Won't Stop Rogue Apps

Looking to clamp down on the escalation of malicious apps on its popular social network, Facebook will now require that every developer to verify their Facebook account by providing a mobile phone number or adding a credit card to their account. While this is clearly a step in the right direction...

Facebook Hit With Clickjacking Worm

A vulnerability on Facebook forced hundreds of thousands of users to endorse a series of webpages over the holiday weekend, making the social networking site the latest venue for an attack known as clickjacking. Read the full article. The Register...

Facebook: The Money Mule Farm

Scammers and phishers are continuing to adapt their recruitment tactics, now going so far as to create special Facebook groups for their work-at-home scams. Phishers have been using social networks such as Facebook, MySpace and Twitter for years now as fertile hunting grounds not only for new...

Mozilla Firefox出错处理信息泄露漏洞

BUGTRAQ ID: 40401 Firefox是非常流行的开源WEB浏览器。 Firefox的window.onerror处理器允许读取重新定向的目标URL。如果通过HTML script标签引用了重新定向站点的话，就可以读取目标URL中所包含的会话特定查询参数。 Mozilla Firefox 3.6.3 Mozilla Firefox 3.5.9 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/ XSUH Cross Site URL...

This Week In Security: Privacy, RedPhone and Adobe

In case you needed any reminders that privacy is one of the more pressing problems on the Web right now, this week’s news provided plenty of them. Along with stories of Facebook’s continued privacy missteps, this week gave us the gift of Google letting users install some Google code to opt out of...