PT-2014-6628

Name of the Vulnerable Software and Affected Versions Instachat - Instagram Messenger aka com.instachat.android version 1.6.2 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information...

PT-2014-6664

Name of the Vulnerable Software and Affected Versions The PopU 2: Get Likes on Instagram aka com.popuapp.popu version 1.7.5 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

PT-2014-6660

Name of the Vulnerable Software and Affected Versions The Phonegram - Instagram Download aka com.pinssible.padgram version 1.9.5 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...

Alpine PhotoTile For Instagram <= 1.2.6.5 - Cross-Site Scripting (XSS)

The alpine-photo-tile-for-instagram WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Alpine PhotoTile for Instagram Plugin <= 1.2.6.5 - Cross-Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Poor Crypto on Instagram Mobile Apps Allow Man-in-the-Middle

Two unrelated researchers this week disclosed a similar session hijack bug in the Instagram mobile applications for Android and iOS. Facebook has reportedly acknowledged the problem, which arose from a failure to fully encrypt all data traffic on the service, but the world’s largest social networ...

Instasheep — Instagram Account Hacking Tool Released

Two days ago, we reported at The Hacker News about a critical issue in the most popular image and video sharing service, Instagram app for mobiles, that allows an attacker to hijack users’ account and successfully access private photos, delete victim's photos, edit comments and also post new...

Instagram Mobile App Issue Leads to Account Hijacking Vulnerability

In the era of Government surveillance, ensuring the security and safety of our private communications regardless of platform – email, VOIP, message, even cookies stored – should be the top priority of the Internet industry. Some industry came together to offer Encryption as the protection against...

Don't Fall for Fake Instagram Desktop Applications Offering 'Image Viewer'

Today, the estimated number of known computer threats like viruses, worms, backdoors, exploits, Trojans, spyware, password stealers, and other variants of potentially unwanted software range into millions. It has ability to create several different forms of itself dynamically in order to thwart...

WordPress Alpine PhotoTile for Instagram插件跨站脚本漏洞

Bugtraq ID:65834 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Alpine PhotoTile for Instagram不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Alpine PhotoTile for Instagram 1.2.6.5 目前没有详细解决方案提供： http://wordpress.org/plugins/...

OkCupid: Instagram Authentication - No Request Token

Hello, On OkCupid, you have the ability to connect your Instagram account. This will sync any photos from your account onto your profile. This is performed by browsing to https://www.okcupid.com/okphotos/okinstagram.html, which will redirect to Instagram for the user to authorise the request. Onc...

WordPress Alpine PhotoTile For Instagram 1.2.6.5 XSS

============================================================== Title ...| XSS in Alpine PhotoTile for Instagram Version .| Alpine PhotoTile for Instagram 1.2.6.5 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/...

Facebook Fixes CSRF Vulnerability in Instagram

Until last week, some parts of the API that Instagram uses were vulnerable to a cross-site request forgery CSRF attack, something that could have put photos users thought were private, out in the open. It took almost six months but Facebook, the photo sharing application’s parent company, patched...

Geolocation OSINT Tool Creepy

Geolocation OSINT Tool Creepy Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentation on map, search filtering based on exact location and/or date, export in csv format or kml for further analysis in Google Maps. What’s new in...

Instagram Photo Upload and Flattr Money Redirection Vulnerability

Affected app: Instagram Android/iOS Affected versions: 4.0.2, 4.1.2 and 4.2.7, probably also earlier versions affected. Summary Last year and earlier this year some vulnerabilities in Instagram Android/iOS were discovered, which give an attacker the ability to like and delete photos in the name o...

Instagram application security vulnerabilities

Protection bypass...

Buffer hacked; Twitter, Facebook flooded with Spam Weight-loss links

If you're a user of the Buffer app, the social-media management service that let you cross-posting to various social networks, be aware that the service got hacked yesterday, with spam messages going out over Facebook. "Buffer was hacked around 1 hour ago, and many of you may have experienced spa...

Two Instagram Android App Security Vulnerabilities

Affected app: Instagram for Android Affected versions: 4.0.2 and 4.1.2, probably also earlier versions as well as iOS affected. Summary After the Instagram iOS vulnerability discovered last year 1, the app's HTTP API has been extended with a cryptographic authentication for changes like "likes" a...

Instagram Crypto Issue / Hardcoded Key

Affected app: Instagram for Android Affected versions: 4.0.2 and 4.1.2, probably also earlier versions as well as iOS affected. Summary After the Instagram iOS vulnerability discovered last year 1, the app's HTTP API has been extended with a cryptographic authentication for changes like "likes" a...

Hacking Instagram Accounts using OAuth vulnerability

'Nir Goldshlager' known as Facebook hacker and founder of Break Security , who reported many critical bugs in Facebook OAuth mechanism in past few months, today disclose a critical vulnerability in Instagram Oauth that allow an attacker to hack any account. Succesful hack allows attacker to acces...