Mozilla to Support Key Pinning in Firefox 32

Mozilla is planning to add support for public-key pinning in its Firefox browser in an upcoming version. In version 32, which would be the next stable version of the browser, Firefox will have key pins for a long list of sites, including many of Mozilla’s own sites, all of the sites pinned in...

Sony PlayStation Network Back Online Following DDoS

Sony Corporation took its online gaming platform, the PlayStation Network PSN, offline over the weekend in the face of a distributed denial of service DDoS attack. As of Sunday, the company said the PSN is back online and that game play can resume. Sony is saying that it has seen no evidence of a...

Anonymous Hackers Claim to Identify the Cop Who killed Mike Brown in Ferguson

Members of the international hacker collective Anonymous have claimed they have identified the Ferguson, Missouri law enforcement officer involved in the fatal shooting of Michael Brown, an unarmed teenager killed on Saturday, which sparked days of protest and raised racial tensions. The hacktivi...

X (Formerly Twitter): User's DM won't deleted after logout from Twitter for iOS (com.atebits.xxx.application-state)

I would like to add an additional information regarding my previous report about "Unencrypted User's DM and Statuses on twitter.db at Twitter for iOS". I have already tried to logout from my Twitter apps including from built-in twitter apps for iOS, and then, I already reboot the iDevice too...

Twitter 'Weighing Legal Options' On Publishing National Security Requests Data

Twitter officials are pushing the United States government for more freedom to publish specific numbers about national security information requests, and said the company is considering its legal options if the government doesn’t allow more data to be made public. In its latest transparency repor...

Verwei.se WordPress Twitter < 1.0 2 - Cross-Site Scripting (XSS)

The verweise-wordpress-twitter WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF

The Twitget WordPress plugin was affected by a twitget.php Twitter Setting Manipulation CSRF security vulnerability...

Xhanch my Twitter - CSRF in admin/setting.php

The Xhanch – My Twitter WordPress plugin was affected by a CSRF in admin/setting.php security vulnerability...

Google Alert And Twitter 3.1.5 - XSS Exploit, SQL Injection

The GoogleAlertandtwitterplugin WordPress plugin was affected by a XSS Exploit, SQL Injection security vulnerability...

Twitter Gains Team From Mitro Password Management Company

Twitter has announced that a cloud-based password management company called Mitro has joined the Twitter team, and all of Mitro’s code is now free and open source. Mitro’s offering a secure password manager that’s meant to help distributed teams share passwords for accounts and services. The...

X (Formerly Twitter): Password reset link not validated.

Hi, team . I found that password reset link sent by twitter is not validated. Description: When a user ask for password reset link at two different times, say at 12.00 PM and at 12.03 PM. Then he is able to change his password using either of the link. Here the previous token is not expiring as...

WordPress Video Gallery 2.5 Cross Site Scripting / SQL Injection

Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

Wordpress Plugin Gallery Objects 0.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

X (Formerly Twitter): password sent over HTTP

URL: http://lb.vine.co/login you need to use HTTPS and enforce it :...

Miniduke APT Campaigh Returns with New Targets, Hacking Tools

The Miniduke advanced persistent threat APT campaign uncovered by researchers at Kaspersky Lab and CrySys Lab in February 2013 is back after a year-long hiatus in which attacks abated almost entirely. While the initial Miniduke operations primarily targeted government organizations in Europe, thi...

Cross site scripting

Cross-site scripting XSS vulnerability in res/faketwitter/frame.php in the "verwei.se - WordPress - Twitter" verweise-wordpress-twitter plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter...

CVE-2014-4566

CVE-2014-4566 affects the WordPress Twitter plugin by verwei.se (verweise-wordpress-twitter) versions 1.0.2 and earlier. The vulnerability resides in res/fake_twitter/frame.php where the base parameter is susceptible to reflected Cross-Site Scripting (XSS), allowing remote attackers to inject arb...

Joomla Spider Catalog (index.php, product_id parameter) SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Joomla comspidercatalog SQL injection Vulnerability Dork: inurl:index.php?option=comspidercatalog Date: 31-10-2012 Author:...

Microsoft Office Word 2010 Crash PoC

No description provided by source. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ----...

OSX/Intel - setuid shell x86_64 - 51 bytes

No description provided by source. / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text global start start: a: mov r8b, 0x02 ; Unix clas...