Snowden's disclosures haven't changed much about Facebook Security

Mark Zuckerberg is continually denying working with the NSA or any other Government Intelligence Agency in serving out data they gathered through extended surveillance, and even he expressed his indignation over the damage the Government is creating for all, on the phone call to the US President...

Mark Zuckerberg frustrated; Obama irritated and Finally NSA Stated

The US intelligence agency NSA National Security Agency broke the Silence on the claim that it has reportedly ‘infected millions of computers around the world with malware’ and that it is ‘impersonating U.S. Social media or other websites’, emphasized the claim as inaccurate. The document provide...

MODX Revolution 2.X SQL Injection

Product: MODX Revolution Severity: Extremely Critical Versions: 2.0.0–2.2.12 Vulnerability type: SQL Injection Report date: 2014-Mar-5 Fixed date: 2014-Mar-6 Description A vulnerability was discovered in MODX Revolution that allows users to inject and manipulate the database. Attackers could...

Hacker removed Mark Zuckerberg's Facebook Timeline Cover Photo

Something unusual happened today, Mark Zuckerberg's Facebook Timeline Cover Photo is removed, as shown in the above Screenshot. Suddenly, after few hours, I got a mail from an Egyptian Hacker with nickname 'Dr.FarFar', claimed that he has hacked the Mark Zuckerberg's Facebook Profile and removed...

Persistent Payload In Windows Volume Shadow Copy

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/exploit/exe' class...

Vulnerability allowed hacker to Delete any Facebook Photo; Rewarded with $12,500 for reporting bug

Indian Security Enthusiast 'Arul Kumar' recently reported an interesting Facebook vulnerability that allowed him to delete any Facebook image within a minute. Facebook Bug Bounty program rewarded him with $12,500 USD for helping the Facebook Security team to patch this critical loophole in their...

Vulnerability allowed hacker to Delete any Facebook Photo; Rewarded with $12,500 for reporting bug

Indian Security Enthusiast 'Arul Kumar' recently reported an interesting Facebook vulnerability that allowed him to delete any Facebook image within a minute. Facebook Bug Bounty program rewarded him with $12,500 USD for helping the Facebook Security team to patch this critical loophole in their...

SA-CONTRIB-2013-072 - Node View Permissions - Access Bypass

The Node View Permissions module adds permissions "View own content" and "View any content" for each content type on the permissions page. However, it only implements hooknodeaccess and not hookqueryalter, which means any listing of nodes does not respect the node view permission. CVE identifiers...

With No Facebook Bug Bounty In Sight, Researcher Gets $12k Reward From Security Community

Like most major Web and software companies, Facebook receives a lot of bug reports. And since the company started its bug bounty program, security researchers have become even more interested in looking for vulnerabilities in the Facebook ecosystem. But, as one researcher learned recently, not al...

Palestinian hacker, who hacked Zuckerberg’s Facebook account to be rewarded with $12,000

The Palestinian hacker 'Khalil Shreateh', who broke into the Mark Zuckerberg's Facebook Timeline to expose a security lapse will be awarded nearly $12,000 but not from Facebook, it will come from an online crowdsourced campaign. The hacker initially used Facebook's whitehat disclosure program, a...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg's Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

Palestinian Hacker posted vulnerability details on Mark Zuckerberg’s Timeline

A Palestinian Web Developer and Hacker, 'Khalil Shreateh' found an interesting vulnerability in Facebook, that allows hacker to bypass the Privacy settings to make a post on anyone's Timeline / Wall. He was forced to post vulnerability details on Mark Zuckerberg Facebook Founder Timeline to prove...

SA-CONTRIB-2013-069 - Password Policy - XSS

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords in Drupal by defining a password policy. When viewing and editing a password policy, the module doesn't sufficiently filter the form text field input and display for the "Passwor...

CVE-2013-0207

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-0207

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-0207

The CVE-2013-0207 entry concerns Drupal's Mark Complete module (7.x-1.x) with a CSRF vulnerability in versions before 7.x-1.1 that could allow remote attackers to hijack user sessions. The issue is due to insufficient CSRF protections in the module’s AJAX/date-field update mechanism. Affected pro...

CVE-2013-0207

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 25 to the Stable Channel. Chrome 25.0.1364.97 for Windows and Linux, and 25.0.1364.99 for Mac contain a number of new items including: Improvements in managing and securing your extensions Better support for HTML5 time/date inputs...

rubygem-dragonfly -- arbitrary code execution

Mark Evans reports: Unfortnately there is a security vulnerability in Dragonfly when used with Rails which would potentially allow an attacker to run arbitrary code on a host machine using carefully crafted requests...