218 matches found
Twitter Ex-CEO Dick Costolo Got Hacked!
The same group of teenage hackers that hacked Facebook CEO Mark Zuckerberg's Twitter and Pinterest accounts have hacked another the Twitter account of another high-profile person. This time, it's Twitter's ex-CEO, Dick Costolo. The hacker group from Saudi Arabia, dubbed OurMine, compromised Twitt...
Facebook CEO Zuckerberg's Twitter, Pinterest accounts Hacked! And the Password was...
The man who runs the biggest social network and continuously implements new security measures to boost its billion users security, himself failed to follow basics of Internet security for his own online accounts. Yes, I’m talking about Facebook CEO Mark Zuckerberg, who had his Twitter and Pintere...
Pinterest Mobile Application Detection
Binary data 9247.prm...
Pinterest Detection via TLS
Binary data 6319.prm...
Pinterest Detection via TLS
Binary data 6321.prm...
Pinterest Detection via TLS
Binary data 6320.prm...
Pinterest Mobile Application Detection
Binary data 9246.prm...
Pinterest - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Pinterest published at the 'play' market has multiple vulnerabilities...
Shopify: Attach Pinterest account - no State/CSRF parameter in Oauth Call back
Hello There is no csrf protection for oauth call backs to attach a pinterest account. An attacker can escalate this to attach his account with the victims profile and monitor his activities. Vulnerable URL:...
WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS
Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Version : 1.3.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : Th...
Shopify: CSRF in Connecting Pinterest Account
Hi, The connect to Pinterest function is vulnerable to CSRF. This allows an attacker to connect his/her pinterest account to the victim's shopify. Even if the victim has already connected a pinterest account, this will allow the attacker to replace the existing connected pinterest account with th...
Shopify: shopifyapps.com XSS on sales channels via currency formatting
pinterest, twitter, buy button and facebook sales channels vulnerable to xss via currency formatting. steps to reproduce: - remove pinterest, twitter, buy button and facebook sales channels at .myshopify.com/admin/channels - go to .myshopify.com/admin/settings/general - change currency formating ...
Pinterest Persistent Mail Encoding Issue
Document Title: =============== Pinterest Bug Bounty 1 - Persistent contactname Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID:...
Pinterest Fixes Validation Vulnerability in API
Pinterest recently fixed an issue in the API of its web app that could have allowed remote attackers to compromise emails and carry out session hijacking and phishing attacks. Vulnerability Lab researcher Benjamin Kunz Mejri discovered the issue, which is a persistent mail encoding and validation...
Pinterest Bug Bounty #1 - Persistent CNAME Vulnerability
Document Title: =============== Pinterest Bug Bounty 1 - Persistent CNAME Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 14...
Pinterest Bug Bounty #1 - Persistent CNAME Vulnerability
Document Title: =============== Pinterest Bug Bounty 1 - Persistent CNAME Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 14...
WordPress Pinterest Plugin <= 1.3.1 - Multiple Vulnerabilities
This plugin is prone to multiple unspecified vulnerabilities. Solution Update the plugin...
HTTPS Opens Door to Paid Pinterest Bug Bounty
Pinterest’s journey toward becoming a fully HTTPS website opened a lot of doors, including a potentially profitable one for hackers. The social networking site this week announced that it would begin paying cash rewards through its bug bounty program, upping the stakes from the T-shirt it...
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
The Feed Them Social – for Twitter feed, Youtube, Pinterest and more WordPress plugin was affected by a XSS & Arbitrary Shortcode Execution security vulnerability...