A week in security (December 17 – 23)

Last week on Labs we looked at Fuchsia OS as a possible alternative for Android, explained all the reasons why cybercriminals want to hack your phone, discussed a flaw in Twitter form that may have been abused by nation states, gave you a Christmas tech scams roundup, revealed why many online...

WSJ Webpage Defaced to Support PewDiePie

UPDATE A webpage owned by the Wall Street Journal was hacked on Monday, in an attempt to promote YouTube celebrity “PewDiePie.” The incident comes on the heels of a separate hack relating to the Swedish YouTuber, comedian and video game commentator, whose given name is Felix Kjellberg. Over the...

h1-5411-CTF: H1-5411 CTF Writeup

So, Hackerone posted a tweet about the Meme CTF Where barcode was in the tweet image by scanning it and decoding from hex I found this link : https://h1-5411.h1ctf.com/ where we can create/generate a memes and for generating the meme this was used form GitHub which i found in source code analysis...

Meme Maker Script 2.1 SQL Injection

Exploit Title: Meme Maker Script 2.1 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/mememaker.php Demo: http://www.memefaces.me/ Version: 2.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Meme Maker Script 2.1 - user SQL Injection

Meme Maker Script 2.1 - user SQL Injection Exploit Title: Meme Maker Script 2.1 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/mememaker.php Demo: http://www.memefaces.me/ Version: 2.1 Tested on: Win7 x64, Kali...

Meme Maker Script 2.1 - 'user' SQL Injection

Exploit Title: Meme Maker Script 2.1 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/mememaker.php Demo: http://www.memefaces.me/ Version: 2.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Meme generator creator - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meme generator creator published at the 'play' market has multiple vulnerabilities...

Rage Meme - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rage Meme published at the 'play' market has multiple vulnerabilities...

Meme Maker - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Meme Maker published at the 'play' market has multiple vulnerabilities...

'The Onion' Twitter Account Hacked via Phishing Attack

The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the satirical news publication The Onion, posting a series of anti-Israeli joke stories and an anti-Obama meme image. In a post on The Onion tech team's GitHub blog, the fake news site explains that the Syria...