Facebook.com Cross Site Request Forgery / Cross Site Scripting

Facebook is a social networking website with the second highest number of visits worldwide, and over 500 million active users. Our team recently performed a quick security audit of the main Facebook site along with its mobile versions. Here are the full details of our findings. I. DESCRIPTION OF...

Facebook's Future: More Koobfaces

VANCOUVER – Working as Facebook’s resident malware researcher is a lonely job, for now. But Nick Bilogorskiy doesn’t expect it to stay that way. In fact, Facebook’s biggest security challenge will be building up its capabilities to identify and tamp down malware infections like the 2009 Koobface...

Bug Count Just One Problem for Facebook Foe Diaspora

Saying that you want to take on the world’s biggest social network is the kind of thing that puts a big target on your back. At least that’s what the ambitious young crew behind Diaspora, an open source alternative to Facebook, found out this week. The Diaspora team pushed out an early as in...

The Week in Security: Gov2.0, DLL Patches and When Social Media Attacks!

Summer may have reached its unofficial end with the Labor Day holiday, but there was no break from security news this week, as both the Gov 2.0 Conference in Washington D.C. and a raft of warnings and patches from leading vendors kept the heat on high. We all know the Internet started as a U.S...

Facebook Apps Pump Out Mobile "Entertainment" Spam

Attacks via social networks continued their steady march on Tuesday, as an untold number of Facebook users unwittingly found themselves caught up in a spam run that pointed friends to premium mobile entertainment Web sites. DEK: A round of spam pumped out by Facebook applications lures users to...

Facebook Friend Finder Email Leakage

Navigate to the Facebook "Friend Finder" feature. 2. Click the "Upload Contact File" option in order to access the file upload prompt. 3. Upload a contact file of ANY of the accepted formats that contains a list of email addresses that you would like to enumerate. 4. Select the target emails,...

Location-Based Services Raise Privacy, Security Risks

The growing popularity of location-based services in the social networking world is a serious security and privacy risk that must be taken seriously. These services, which allow users to share their whereabouts with other people by disclosing their own location, is a very popular trend on social...

'Dislike' Button Scam on Facebook Goes Viral

Researchers are advising Facebook users to avoid offers to download an “official dislike button”, which the firm claims has spread virally across the service. There are two different versions of the ruse thus far, both with tiny URL links to rogue applications. Read the full article...

Facebook Login Bug Easy to Exploit

A bug in Facebook’s login system allows attackers to match unknown email addresses with users’ first and last names, even when they’ve configured their accounts to make that information private. Read the full article. The Register...

Блогер cyxymu потребовал от Медведева разобраться с хакерами

Блогер cyxymu потребовал от Медведева разобраться с хакерами Блогер cyxymu http://cyxymu.livejournal.com/ 10 августа обратился к президенту России Дмитрию Медведеву с просьбой найти организаторов DDoS-атак на ресурсы Twitter, LiveJournal и Facebook. Cyxymu предложил президенту использовать для...

Иинформация о 100 миллионах пользователей Facebook

Некий Ron Bowes сграбил всю инфу и выложил на пиратской бухте, которая не была закрыта настройками приватности. Пост на его бложеке: http://www.skullsecurity.org/blog/?p=887 BBC быстренько подсуетились раскрутили это как громадную новость Линк на торрент:...

Facebook Political Action SQL Injection

==================================================== FaceBook's servers was hacked again by Inj3ct0r Team ==================================================== Part 1 Original: http://inj3ct0r.com/exploits/11638 Part 2 Original: http://inj3ct0r.com/exploits/13403 + English translation Inj3ct0r...

Attackers Moving to Social Networks For Command and Control

Bot herders and the crimeware gangs behind banker Trojans have had a lot of success in the last few years with using bulletproof hosting providers as their main base of operations. But more and more, they’re finding that social networks such as Twitter and Facebook are offering even more fertile...

Joomla EasyBlog Cross Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

Joomla! Component EasyBlog - Persistent Cross-Site Scripting

Joomla! Component EasyBlog - Persistent Cross-Site Scripting Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Facebook вводит функцию жалобы на педофилов

Администрация Facebook предоставит пользователям возможность с помощью специальной кнопки пожаловаться на подозрительные действия пользователей социальной сети. Все тревожные сообщения будут пересылаться непосредственно в европейский Центр онлайн-безопасности и защиты детей от эксплуатации Child...

Facebook Employees Crack Admin Security

Senior engineers at Facebook responsible for SRE site reliability engineering challenged Facebook employees to try to compromise him and gain access to Facebook’s administrative system via information obtained from him. They succeeded. Read the full article. TechCrunch...

Facebook Improves User Privacy Controls

In a move hailed by privacy advocates, Facebook deployed a feature that allows its users to better control what personal information can be accessed by third-party applications and websites. Read the full article. The Register...

Myspace Clone 2010 Cross Site Scripting / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

MySpace Clone 2010 Multiple Vulnerabilies

Exploit for php platform in category web applications ========================================= MySpace Clone 2010 Multiple Vulnerabilies ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...