Twitter for iPhone - Man in the Middle Security

Twitter for iPhone - Man in the Middle Security source: https://www.securityfocus.com/bid/56665/info Twitter for iPhone is prone to a security vulnerability that lets attackers to perform a man-in-the-middle attack. Attackers can exploit this issue to capture and modify pictures that the user see...

Twitter for iPhone - Man in the Middle Security

source: https://www.securityfocus.com/bid/56665/info Twitter for iPhone is prone to a security vulnerability that lets attackers to perform a man-in-the-middle attack. Attackers can exploit this issue to capture and modify pictures that the user sees in the application. Twitter for iPhone 5.0 is...

Twitter 5.0 Eavesdropping Proof Of Concept

Twitter App vulnerable to eavesdropping Vendor: Twitter Inc. Product: Twitter 5.0 Tested on: iPhone 4 iOS 6.0 Vendor notification: Nov 10, 2012. Risk level: Low Researcher: Carlos Reventlov Link: http://reventlov.com/advisories/twitter-app-vulnerable-to-partial-mitm The Twitter 5.0 app for the...

Rollingstone.com Cross Site Scripting

---------------------------------------------------------------------------------------------------- Title : Rollingstone.com reflected Cross Site Scripting XSS vulnerability Vendor : Wenner Media http://www.jannswenner.com/ Description : Rollingstone.com web-site is vulnerable to reflected...

Guadeloupe National Domain registrar hacked, Twitter & Google domain credentials leaked

Guadeloupe is a Caribbean island located in the Leeward Islands, in the Lesser Antilles. Today a hacker going by name "UR0B0R0X" claimed to hack into the "Network Information Center Guadeloupe" nic.gp, which is Guadeloupe National Domain registrar having control over domains of big companies like...

English Defence League defaced by ZCompany Hacking Crew

ZCompany Hacking Crew members hack and deface English Defence League official website https://englishdefenceleague.org,a far-right British organization . Deface page include text "Fuck Zionist Jews! – Boycot israel! – Fuck the American Government! - Fuck fascist Organizations like EDL" and a...

Art of twitter account hacking, now or never !

Phishing is most commonly perpetrated through the mass distribution of e-mail messages directing users to a fraud web site or services. These professional criminals daily find new ways to commit old crimes, treating cyber crime like a business and forming global criminal communities. Another late...

United Socialist Party of Venezuela's twitter account hacked

LulzSec Peru hack the official twitter account @partidopsuv of the United Socialist Party of Venezuela PSUV, in the evening hours of Thursday. Hackers start twitting from hacked account, "No to communism. Corrupt Chavez get out." In a blog post Party people announce that their twitter account is...

Twitter Resets More Passwords Than Accounts Hacked

An untold number of Twitter users Thursday received suspicious emails alerting them their passwords had been reset following a loosely defined, third-party hack. The emails are apparently legitimate, though they were sent to more than victims of compromised accounts. “We’re committed to keeping...

UK Ministry of Defence hacked by NullCrew

The United Kingdom Ministry of Defence website www.qhm.mod.uk hacked by two Null Hacking Crew members @OfficialNull and @Timoxeline and They extracted data published online. The data dump include 3400 email addresses and passwords from Ministry of Defence portal. Hackers trying to trend...

Sophos Products - Multiple Vulnerabilities

Sophos Products - Multiple Vulnerabilities List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled "Practical Attacks against Sophos Antivirus". As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper...

Scam Alert : You are Twitter 'User For The Month'

The growing popularity of microblogging sites like Twitter has sparked a corresponding rise in social networking scams. If you receive an email or direct message DM on Twitter with text "Hello, You have been selected to be the Twitter user for the month! We've got a reward for you text this word...

Bug Hunters have Windows 8 Zeroday Exploit

French security researcher firm and famous bug hunters at Vupen announced that it had already developed an exploit that could take over a Window 8 machine running Internet Explorer 10, in spite of the many significant security upgrades Microsoft built into the latest version of its operating...

MyBB Follower User Plugin - SQL Injection

Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

CVE-2011-4129

1 services/twitter/twitter-contact-view.c and 2 services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...

CVE-2011-4129

1 services/twitter/twitter-contact-view.c and 2 services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...

Design/Logic Flaw

1 services/twitter/twitter-contact-view.c and 2 services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...

CVE-2011-4129

CVE-2011-4129 affects libsocialweb b4 0.25.20, specifically the Twitter integration in twitter-contact-view.c and twitter-item-view.c. The code automatically connects to Twitter when no Twitter account is configured, which could enable a remote attacker to obtain sensitive information via a man-i...

CVE-2011-4129

Removed by vendor...

CVE-2011-4129

1 services/twitter/twitter-contact-view.c and 2 services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...