Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability

Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...

Drupal Twitter Module Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full text of this advisory can also be found at http://www.madirish.net/?article=447 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Infested Torrent Sites Caused Twitter PW Reset

Twitter revealed more details about the phishing attacks that caused the company to reset the passwords on some user accounts Feb. 2. Read the full article. eWEEK...

Hacked Twitter Accounts Corral Cash

According to researchers, cybercriminals are trying to sell hacked Twitter user names and passwords online for hundreds of dollars and as much as $1000. Read the full article. Computerworld...

Researcher Warns of Twitter Security Flaw

A flaw in Twitter’s website has left the login credentials of its users vulnerable to hackers, according to a security researcher who has asked the social media company to fix the problem. Read the full story Reuters...

Top Facebook, Twitter Hacks From 2009

Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...

Twitter, Google Calendar Open to XSS Holes

In a proof of concept, researcher Nir Goldshlager demonstrated cross-site scripting XSS vulnerabilities in Google Calendar and Twitter that he said could be used to steal cookies and session IDs. Read the full article. eWEEK...

Joomla Countries SQL Injection

Joomla Component comcountries SQL Injection Vulnerability Author : FL0RiX Name : comcountries Greez : Deep-Power, PyskE,Septemb0x,KaCaK Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : http://www.gocvg.com/index.php?option=comcountries&locat=SQL INJ. Bug Fix...

All About Brittany on Twitter

The day before yesterday, we saw reports about how search engine queries for “Brittany Murphy” returned sites containing links to malware. So it’s the usual situation, with the bad guys exploiting the death of a famous person, just like they did with Michael Jackson. Yesterday we identified some...

Twitter Reveals More on DNS Attack

Attackers got their hands on a valid set of Twitter credentials and used them to compromise the DNS records. Read the full article. eWEEK...

Twitter Outage A DNS Hack

Microblogging site Twitter went offline for a while Friday after hackers calling themselves the Iranian Cyber Army apparently managed to change DNS records, redirecting traffic to another Web page. Read the full article. Computerworld...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

SSL Flaw Opens Up Twitter MiTM Attack

The vulnerability in the design of the SSL/TLS protocol revealed earlier this month can apparently be used to carry out attacks in practice. On his blog, student Anil Kurmus reports that he was able to steal a Twitter password by using a man-in-the-middle attack. Until now it had been assumed tha...

Twitter API Being Exploited by Drive By Malware

Drive-by exploit writers have been spotted using a popular Twitter command to send web surfers to malicious sites, a technique that helps conceal the devious deed. According to researcher Denis Sinegubko, it’s being added to heavily obfuscated redirection scripts injected into compromised website...

Tips for Avoiding Malware on Social Networks Include More than Common Sense

Amid all the malware on Facebook, Twitter, Bit.ly and other social networks and microblogs, there are some new tips and strategies on how to avoid being hijacked. The article describes a number of methods including the hijacking of Twitter trending topics and hijacking legitimate Twitter accounts...

Malware Abundant in Twitter URLs

As many as one in every 500 web addresses posted on Twitter lead to sites hosting malware, according to researchers at Kaspersky Labs who have deployed a tool that examines URLs circulating in tweets. The spread of malware is aided by the popular use of shortened URLs on Twitter, which generally...

Unstoppable New Phishing Attacks Blanket Facebook, Twitter, Hotmail

How quaint seem the days when naïve hacker wannabes phished PayPal logons, then posted them on IRC chat channels, to try to make a few bucks — but mostly for bragging rights. That was circa 2002-2003. Fast forward to the present. At this moment, Facebook is being blanketed by two high-volume emai...

Twitter Warns About New Phishing Attack

Twitter warned on Wednesday about a new phishing attack in which direct messages to users link to a fake log-in page that steals passwords. “We’ve seen a few phishing attempts today; if you’ve received a strange direct message, and it takes you to a Twitter log-in page, don’t do it!” the Twitter...

Spider Solitaire PoC

No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...

Worm Attacks Reddit

The rash of attacks on social networking sites is continuing, this time in the form of a cross-site scripting worm that is currently plaguing Reddit, the popular social bookmarking portal. The Reddit attack is interesting in that it requires a minimum of user interaction in order to spread. The...