Yasser H. Ali, an Egyptian security researcher, has discovered three critical vulnerabilities in PayPal website which could be used to take control of customer accounts. Yasser explained in his post the three vulnerabilities used to breach into accounts: 1] Reusable CSRF Token : The CSRF token “that authenticate every single request made by the user” […]
Continue ReadingA Vulnerability has been discovered in the wildly popular messaging app WhatsApp, which allows anyone to remotely crash WhatsApp just by sending a specially crafted message, two security researchers reported. Two India based independent security researchers, Indrajeet Bhuyan and Saurav Kar, both 17-year old demonstrated the WhatsApp Message Handler vulnerability. In a video demonstration, they […]
Continue ReadingAt the beginning of this month, just like other social networks, Twitter also started paying individuals for any flaws they uncover on its service with a fee of $140 or more offered per flaw under its new Bug Bounty program, and here comes the claimant. An Egyptian Security Researcher, Ahmed Aboul-Ela, who have been rewarded […]
Continue ReadingA German Security researcher has demonstrated a critical vulnerability on Ebay website. He found a controller which was prone to remote-code-execution due to a type-cast issue in combination with complex curly syntax. In a demo video, he exploited this RCE flaw on EBay website, and managed to display output of phpinfo() PHP function on the […]
Continue ReadingThe Iranian group defeated the very basic phenomenon of an iPhone Fingerprinting scanner, which allows them to unlock an iPhone device with multiple Fingerprints. Apple‘s iPhone 5s, was launched just available in stores two weeks before with a new feature of biometrics-based security system called “Touch ID”, that involves analyzing a user’s fingerprint and using […]
Continue ReadingThere’s a vulnerability that affects WebView control in Android applications installed on Android devices running versions older than 4.2. This vulnerability makes a large number of Android applications act as a hacker pipeline into user’s devices and provides a way to install malicious software, send SMSs and more. WebView allows the user to view a […]
Continue Reading