Facebook privacy flaw exposes Mark Zuckerberg private photos

Facebook privacy flaw exposes Mark Zuckerberg private photos A flaw in Facebook has granted prying users access to supposedly private photographs, including those of the website's chief executive, Mark Zuckerberg. In total 14 pictures of Mr Zuckerberg were posted to image site Imgur under the...

Facebook Fixes Complaint Feature Abused To Bypass Photo Privacy, Zuckerberg Among Victims

Facebook has fixed a critical flaw in a user feedback feature that allowed any user to access private photos posted in other users accounts. Before it was fixed, the flaw was used to hack the account of Facebook CEO Mark Zuckerberg and post photos online. The social network responded quickly afte...

kernel: ext4: ext4_ext_insert_extent() kernel oops

fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service system crash via vectors involving ext4 umount and mount operations...

DHS Names Weatherford as Deputy Under Secretary for Cybersecurity

Department of Homeland Security DHS Secretary Janet Napolitano appointed Mark Weatherford today as the National Protection and Programs Directorate’s NPPD new Deputy Under Secretary for Cybersecurity, according to a press release on the DHS’ site. The role was created by the Directorate in...

A number of XSS holes found during QA bltiz

See Mark H and Coreys blitz pages for details...

Mozilla Foundation Security Advisory 2011-37

Mozilla Foundation Security Advisory 2011-37 Title: Integer underflow when using JavaScript RegExp Impact: Critical Announced: September 27, 2011 Reporter: Mark Kaplan Products: Firefox 3.6 Fixed in: Firefox 3.6.23 Description Mark Kaplan reported a potentially exploitable crash due to integer...

Integer underflow when using JavaScript RegExp — Mozilla

Mark Kaplan reported a potentially exploitable crash due to integer underflow when using a large JavaScript RegExp expression. We would also like to thank Mark for contributing the fix for this problem...

Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks

Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on Image...

November, 2005: Sony/BMG Digital Rights Management Rootkit

Sony helped create the home entertainment industry by successfully defending the right of its customers to copy movies for personal use with the help of its Betamax technology, of course all the way to the U.S. Supreme Court. That made the debacle of the company’s decision, two decades later, to...

AST-2011-006: Asterisk Manager User Shell Access

Asterisk Project Security Advisory - AST-2011-006 Product Asterisk Summary Asterisk Manager User Shell Access Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known Yes Reported On February 10, 2011 Reported By Mark Murawski markm AT...

Andys PHP KnowledgeBase 0.95.2 - viewusers.php SQL Injection

Andys PHP KnowledgeBase 0.95.2 - viewusers.php SQL Injection 'Andy's PHP Knowledgebase' SQL Injection Vulnerability CVE-2011-1546 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of...

Andy's PHP Knowledgebase 0.95.2 SQL Injection

'Andy's PHP Knowledgebase' SQL Injection Vulnerability CVE-2011-1546 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of the 's' query parameter. II. TESTED VERSION...

Quick Polls - Local File Inclusion Deletion

Quick Polls - Local File Inclusion Deletion 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loca...

Quick Polls - Local File Inclusion / Deletion

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

TheHackerNews and CyberArmy(India) Facebook Pages Hacked By Albania Security Group !

TheHackerNews and CyberArmyIndia Facebook Pages Hacked By Albania Security Group ! Link of pages : and https://www.facebook.com/cyberarmy.in Albania Security Group !! The Group is created by 4 members !! hacker twilight ,akrepi hacker , BombRun , WarBot ! They have hacked 300 facebook fan pages i...

Facebook Founder, Mark Zuckerberg's Facebook Fan Page Hacked !

It turns out even if you own the Internet, you're still susceptible to malicious hackers. Facebook CEO Mark Zuckerberg had to change Web addresses for his Facebook fan page late Tuesday night after a hacker appeared to gain access to the page and had the ability to write status messages on behalf...

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability (CVE-2010-4331)

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted content to be presented to a user...

Seo Panel 2.2.0 - Cookie-Rendered Persistent Cross-Site Scripting

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted content to be presented to a user...

Rumors of Facebook shutting down !

Rumors of an impending Facebook shutdown had the site's millions of users in a panic Saturday as they wondered who would take their number one procrastination tool away. The Internet rumor was sparked by a report from the "Weekly World News," a website which also includes a story insisting "Alien...