'TweetDeck Teams' Allows Managing Multiple Twitter Accounts Without Sharing Passwords

Many times organizations, companies and groups of people come across the problem when their social media teams have to work within a single Twitter account or maintain multiple twitter accounts. In this case, either they need to use some third party API-based services or they use TweetDeck...

X (Formerly Twitter): Reporting user's profile by using another people's ID

Hello , I'm Hussein .. Here is the video of the POC : https://www.youtube.com/watch?v=1UQmGRfDoYE The link I used in the video : https://twitter.com/safety/reportstory?source=reportprofile&reporteduserid=ID TO REPORT&reporteruserid=REPORTER's ID Please fix this fastly : Thanks, Good day :...

Government Requests for Twitter User Data Continue to Grow

The appetite for Twitter user data from governments around the world continues to grow, with the volume of such requests increasing by 40 percent in the second half of 2014. Requests from the United States government alone went up 29 percent, the company said in its latest transparency report...

Hacktivist Group Anonymous (#OpISIS) Takes Down Islamic State (ISIS) Social Media Accounts

The hacktivist group Anonymous has launched a massive cyber attack against the Islamic State of Iraq and Syria ISIS — the radical Islamic terrorist group who were responsible for the terrorist attack against the Paris offices of satirical magazine Charlie Hebdo. With huge social media presence,...

X (Formerly Twitter): Twitter Card - Parent Window Redirection

Hi, I was trying to find XSS on another website and I finally did. After that I tried share this url on Twitter to show website owner, and noticed that I can run javascript on that iframe. Javascript that I used on Twitter Card : top.window.location.href="https://google.com.tr" You can watch PoC...

X (Formerly Twitter): Problem with OAuth

There are many website that tracks the unfollowers and all like: http://unfollowerstats.com Steps: 1. Login with ur twitter account, i.e. [email protected] 2. Open http://unfollowerstats.com, This will ask you to login with twitter: 3. you will get a link like this:...

Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution

The Feed Them Social – for Twitter feed, Youtube, Pinterest and more WordPress plugin was affected by a XSS & Arbitrary Shortcode Execution security vulnerability...

Taylor Swift's Twitter and Instagram Accounts Hacked

The very popular Pop star Taylor Swift became the latest celebrity to have their social media accounts hacked on Tuesday. The 25-year-old "Shake It Off" singer, who has the fourth-most popular Twitter account with 51.4 million followers, appeared to be asking her millions of followers to follow...

X (Formerly Twitter): URGENT - SUBDOMAIN TAKEOVER ON TWITTER ACQ.

Hello Twitter Security Team, I reccomend you to read this report with the maximum attention! This is the same isse that you ever see here: https://hackerone.com/reports/42236 and here https://hackerone.com/reports/32825. Well ,now, the acquisition where I found this domain is: trendrr.tv..Before...

X (Formerly Twitter): Flaw in login with twitter to steal Oauth tokens

Hey hi, Steps to reproduce: ============================================= I have been testing the twitter kit in fabric. I added login with twitter integration to my application. I pushed the application to my android phone , clicked login with twitter. entered my username and password. Searched ...

X (Formerly Twitter): Path disclosure in platform0.twitter.com

Hi Twitter, I am going to disclose a vulnerability which I’ve found in platform0.twitter.com , hoping this will make Twitter more secure place. - Vulnerability Class: Path Disclosure - Proof of Concept : - Link : https://platform0.twitter.com - you must use https instead of http to reproduce POC ...

X (Formerly Twitter): twitter android app Fragment Injection

com.twitter.android.WidgetSettingsActivity extend PreferenceActivity and export. By entering the appropriate extra intent can call any of its internal fragment. So do not export com.twitter.android.WidgetSettingsActivity...

CVE-2015-0016

Directory traversal vulnerability in the TS WebProxy aka TSWbPrxy component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted...

WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Twitter LiveBlog plugin is a plugin for dynamic posting of articles or tweets. The WordPress plugin Twitter LiveBlog cross-site request...

X (Formerly Twitter): No rate limiting on creating lists

Hi No rate limiting on creating lists in twitter account hope you guys understand...

CVE-2014-9398

Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 idptttwitterusername or 2 idptttweetprefi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...

CVE-2014-9398

Cross-site request forgery CSRF vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the mashtlbtwitterusername parameter in the...

CVE-2014-9398

The CVE-2014-9398 entry concerns the WordPress Twitter LiveBlog plugin (versions 1.1.2 and earlier). The vulnerability is a CSRF flaw that allows an attacker to hijack an administrator’s authenticated session to perform actions that may enable XSS via the mashtlb_twitter_username parameter in twi...