Barack Obama's Twitter, Facebook, Campaign website and Email Accounts hacked by Syrian Electronic Army

The pro-Assad group Syrian Electronic Army claims it has hacked the President Barack Obama's website , Twitter-Facebook accounts and access email accounts linked to Organizing For Action, the non-profit offshoot of Obama For America, Obama's 2012 campaign operation. Last night, Syrian Electronic...

Dutch Police arrested TorRAT Malware Gang for stealing over Million Dollar

The TorRAT malware was first appeared in 2012 as spying tool only. But from August 2012, Bitcoin Mining feature was added and it became a powerful hacking tool that was commonly associated with attacks on Financial institutions. ab This year TorRat Malware targeted two out of three major Banks in...

Buffer hacked; Twitter, Facebook flooded with Spam Weight-loss links

If you're a user of the Buffer app, the social-media management service that let you cross-posting to various social networks, be aware that the service got hacked yesterday, with spam messages going out over Facebook. "Buffer was hacked around 1 hour ago, and many of you may have experienced spa...

Buffer hacked; Twitter, Facebook flooded with Spam Weight-loss links

If you're a user of the Buffer app, the social-media management service that let you cross-posting to various social networks, be aware that the service got hacked yesterday, with spam messages going out over Facebook. "Buffer was hacked around 1 hour ago, and many of you may have experienced spa...

Hacker stole $100,000 from Users of California based ISP using SQL Injection

In 2013 we have seen a dramatic increase in the number of hack attacks attempted against banks, credit unions and utility companies using various techniques including DDoS attack, SQL injection, DNS Hijacking and Zero-Day Flaws. SQL Injection is one of the most common security vulnerabilities on...

US news agency GlobalPost's twitter and website hacked by Syrian Electronic Army

In a series of high profile hacks, 'Syrian Electronic Army SEA' just a few minutes before took control twitter account and website of 'GlobalPost', a US based news agency. 'Syrian Electronic Army is an organized hacking group loyal to the Syrian President Bashar al-Assad and known for their high...

US news agency GlobalPost's twitter and website hacked by Syrian Electronic Army

In a series of high profile hacks, 'Syrian Electronic Army SEA' just a few minutes before took control twitter account and website of 'GlobalPost', a US based news agency. 'Syrian Electronic Army is an organized hacking group loyal to the Syrian President Bashar al-Assad and known for their high...

CVE-2013-5157

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

CVE-2013-5158

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...

Code injection

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

Information disclosure

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...

CVE-2013-5158

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...

CVE-2013-5157

Summary: CVE-2013-5157 affects the Twitter subsystem in Apple iOS prior to 7, where lack of API conformity allowed non-conforming apps to access Twitter daemon interfaces and post Tweets by sending direct requests to the daemon. This is due to insufficient access controls on the Twitter daemon in...

CVE-2013-5158

In Apple iOS before version 7, the Social subsystem did not properly restrict access to the Twitter icon cache, enabling physically proximate attackers to disclose information about recent Twitter interactions. Affected component: Social subsystem cache handling in iOS 6.x and earlier. Root cause...

CVE-2013-5157

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

PT-2013-5402

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns the Twitter subsystem in Apple iOS, which does not enforce API conformity for access to Twitter daemon interfaces. This allows attackers to post Tweets by using a crafted app that...

CVE-2013-5158: Undefined Security Weakness

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...

PT-2013-5403

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns the Social subsystem in Apple iOS, which fails to properly restrict access to the cache of Twitter icons. This allows physically proximate attackers to obtain sensitive information...

CVE-2013-5157: Undefined Security Weakness

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

phpLinks Cross Site Scripting

Exploit Title: PhpLinks Cross Site Scripting Vulnerability Date: 2013 15 September Author: Arsan Vendor Homepage: www.newphplinks.com Version : All Version Tested on: Linux & Windows Category: webapps Google Keywords: inurl:"/index.php?PID=" intext:"Powered By phpLinks" + Exploit :...