Facebook Fixes Instagram Vulnerability That Opened 1M Accounts to Compromise

Facebook was quick to fix an issue earlier this month that could’ve let an attacker break into four percent of all active, locked Instagram accounts, meaning it affected approximately one million users. Belgium-based IT security consultant Arne Swinnen discovered the issue two weeks ago when he...

Who Viewed Your Profile on Instagram? Obviously, Hackers!

Are you curious about who viewed your profile on Instagram? This is probably the most frequently asked question nowadays, and there are several applications available on Google Play Store and Apple App Store, which claims to offer you the opportunity to see who is looking at your Instagram profil...

Instagram Adds Two-Step Verification to Prevent Account from being Hacked

Hijacking an online account is not a complicated procedure, not at least in 2016. Today, Instagram confirmed that the company is in the process to roll out two-factor authentication for its 400 Million users. It is impossible to make your online accounts hack-proof, but you can make them less...

WordPress Instagram 1.1.0 Cross Site Scripting

Exploit Title : WordPress Instagram Plugin 1.1.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/ Software Link : https://wordpress.org/plugins/instalinker/ Date: 2016/02/04 Version : 1.1.0 Vulnerable code : File Name: instalinker-admin-preview.php...

Security researchers have found that Instagram vulnerability by the FaceBook executives, the threat-vulnerability warning-the black bar safety net

! An independent security researcher claimed that he had discovered Instagram in a series of security vulnerabilities and configuration flaws, by using these loopholes, he managed to get access stored on the Instagram servers sensitive data on the permissions; in him, to the relevant vendor...

Shocking! Instagram HACKED! Researcher hacked into Instagram Server and Admin Panel

Ever wonder how to hack Instagram or how to hack a facebook account? Well, someone just did it! But, remember, even responsibly reporting a security vulnerability could end up in taking legal actions against you. An independent security researcher claims he was threatened by Facebook after he...

Facebook, Researcher Spar Over Instagram Vulnerabilities

A security researcher is in a bit of a scrum with Facebook over vulnerability disclosures that not only tested the boundaries of the social network’s bug bounty program, but he said, also prompted hints of legal and criminal action. Wesley Wineberg, a contract employee of security company Synack,...

jalopnik.com XSS vulnerability

Vulnerable URL: http://jalopnik.com/ajax/inset/iframe?id=instagram-80uTYMJ58"=1 Details: Description| Value ---|--- Patched:| Yes, at 07.11.2015 Latest check for patch:| 07.11.2015 21:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1515 Google Pagerank| 0 VIP...

Geotweet - Social engineering tool for human hacking

Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...

Alpine PhotoTile for Instagram <= 1.2.7.5 - Authenticated Cross-Site Scripting (XSS)

The alpine-photo-tile-for-instagram WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

oninstagram.com XSS vulnerability

Vulnerable URL: http://www.oninstagram.com/profile/search?query=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress Portfolio 1.0 Cross Site Request Forgery

Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL: https://wordpress.org/plugins/portfolio-by-lisa-westlund/ Vulnerability Type: Cross-site Request Forgery CWE-352 Affected...

WordPress Portfolio 1.0 Cross Site Request Forgery Vulnerability

WordPress Portfolio plugin version 1.0 suffers from a cross site request forgery vulnerability. Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL:...

[Responsible disclosure] How I could have hacked 62.5 million Zomato Users

Note: This is being published with the permission of Zomato Team. The vulnerability is now fixed. Zomato is an online restaurant search and discovery service providing information on home delivery, dining-out, cafés and nightlife for various cities of India and 21 other countries. It has 62.5...

Instagram Mobile Application Detection

Binary data 8776.prm...

Google to Introduce New Photo-Sharing Platform to Kill Instagram

Google is reportedly going to launch a new online photo-sharing service and storage option at its developer conference later this month, which Bloomberg says, will not be a part of its Google+ social network. At the moment, Google offers a photo sharing service known as "Google+ Photos," which...

WordPress WP Instagram Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress WP Instagram Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Instagram API Bug Could Allow Malware Downloads

A security researcher says there is a bug in the Instagram API that could enable an attacker to post a message with a link to a page he controls that hosts a malicious file, but when the user downloads the file it will appear to come from a legitimate Instagram domain, leading the victim to trust...