3164 matches found
Samsung Patches Social Media Vulnerability in Millions of Devices
Samsung patched a vulnerability last month in SNS Provider, a popular application that manages other social media apps present in millions of its devices. If exploited the bug could have given attackers the ability to access to any personal information users stored on Facebook, LinkedIn and...
X (Formerly Twitter): Twitter Ads Campaign information disclosure through admin without any authentication.
Hi Twitter !! I just wanted to report a major flaw which I found in https://ads.twitter.com , hoping it make twitter more secure and I am glad for being a part of it. Vulnerability Name: OWASP:A6 Sensitive data Exposure Vulnerable URL: https://ads.twitter.com/admin/accountstypeahead.json?query=...
X (Formerly Twitter): Cross site Port Scanning bug in twitter developers console
This vulnerability allow a port scanning a remote machine on internet . an attacker can scan a remote machine through this vulnerability using twitter ip as a proxy . The vulnerability exit on url https://dev.twitter.com/rest/tools/console through console an attacker can use GET or POST request...
Twitter Changes Abuse Reporting Process to Address Doxing
Twitter has revised and simplified its rules and process for reporting abusive behavior on the service, and users now have the ability to report people who are posting their personal information. The change essentially gives Twitter users a method to combat doxing, which is the process of dumping...
X (Formerly Twitter): Redirect URL in /intent/ functionality is not properly escaped
Choose a tweet from a user that the victim follows but not favorited. Send the victim message like "Please favorite this:...
'TweetDeck Teams' Allows Managing Multiple Twitter Accounts Without Sharing Passwords
Many times organizations, companies and groups of people come across the problem when their social media teams have to work within a single Twitter account or maintain multiple twitter accounts. In this case, either they need to use some third party API-based services or they use TweetDeck...
X (Formerly Twitter): Reporting user's profile by using another people's ID
Hello , I'm Hussein .. Here is the video of the POC : https://www.youtube.com/watch?v=1UQmGRfDoYE The link I used in the video : https://twitter.com/safety/reportstory?source=reportprofile&reporteduserid=ID TO REPORT&reporteruserid=REPORTER's ID Please fix this fastly : Thanks, Good day :...
Government Requests for Twitter User Data Continue to Grow
The appetite for Twitter user data from governments around the world continues to grow, with the volume of such requests increasing by 40 percent in the second half of 2014. Requests from the United States government alone went up 29 percent, the company said in its latest transparency report...
Hacktivist Group Anonymous (#OpISIS) Takes Down Islamic State (ISIS) Social Media Accounts
The hacktivist group Anonymous has launched a massive cyber attack against the Islamic State of Iraq and Syria ISIS — the radical Islamic terrorist group who were responsible for the terrorist attack against the Paris offices of satirical magazine Charlie Hebdo. With huge social media presence,...
X (Formerly Twitter): Twitter Card - Parent Window Redirection
Hi, I was trying to find XSS on another website and I finally did. After that I tried share this url on Twitter to show website owner, and noticed that I can run javascript on that iframe. Javascript that I used on Twitter Card : top.window.location.href="https://google.com.tr" You can watch PoC...
X (Formerly Twitter): Problem with OAuth
There are many website that tracks the unfollowers and all like: http://unfollowerstats.com Steps: 1. Login with ur twitter account, i.e. [email protected] 2. Open http://unfollowerstats.com, This will ask you to login with twitter: 3. you will get a link like this:...
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
The Feed Them Social – for Twitter feed, Youtube, Pinterest and more WordPress plugin was affected by a XSS & Arbitrary Shortcode Execution security vulnerability...
Taylor Swift's Twitter and Instagram Accounts Hacked
The very popular Pop star Taylor Swift became the latest celebrity to have their social media accounts hacked on Tuesday. The 25-year-old "Shake It Off" singer, who has the fourth-most popular Twitter account with 51.4 million followers, appeared to be asking her millions of followers to follow...
X (Formerly Twitter): URGENT - SUBDOMAIN TAKEOVER ON TWITTER ACQ.
Hello Twitter Security Team, I reccomend you to read this report with the maximum attention! This is the same isse that you ever see here: https://hackerone.com/reports/42236 and here https://hackerone.com/reports/32825. Well ,now, the acquisition where I found this domain is: trendrr.tv..Before...
X (Formerly Twitter): Flaw in login with twitter to steal Oauth tokens
Hey hi, Steps to reproduce: ============================================= I have been testing the twitter kit in fabric. I added login with twitter integration to my application. I pushed the application to my android phone , clicked login with twitter. entered my username and password. Searched ...
X (Formerly Twitter): Path disclosure in platform0.twitter.com
Hi Twitter, I am going to disclose a vulnerability which I’ve found in platform0.twitter.com , hoping this will make Twitter more secure place. - Vulnerability Class: Path Disclosure - Proof of Concept : - Link : https://platform0.twitter.com - you must use https instead of http to reproduce POC ...
X (Formerly Twitter): twitter android app Fragment Injection
com.twitter.android.WidgetSettingsActivity extend PreferenceActivity and export. By entering the appropriate extra intent can call any of its internal fragment. So do not export com.twitter.android.WidgetSettingsActivity...
CVE-2015-0016
Directory traversal vulnerability in the TS WebProxy aka TSWbPrxy component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted...
WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Twitter LiveBlog plugin is a plugin for dynamic posting of articles or tweets. The WordPress plugin Twitter LiveBlog cross-site request...