Description This bug could allow an attacker to disclose the Instagram account id linked to a Facebook user or page
Continue readingDisclose the Instagram account linked to a Facebook user account or page
Description This bug could allow an attacker to disclose a list of videos/photos/files which includes internal information regarding testing of
Continue readingDisclose internal files related to testing of some Facebook tools
Description This bug allows an attacker to expose the entity name or the object type of Facebook objects (including internal
Continue readingExposure of Facebook object type by knowing the object ID
Description This bug could have allowed an attacker to add draft subtitles to any video (private or public), or enable
Continue readingAdd draft subtitles to any Facebook video and Full Path Disclosure
Description This bug could allow an attacker to get valid URL signature of uploaded files in the Facebook CDN.
Description This bug could allow an attacker to bruteforce the password of Instagram users
Description This bug could allow an attacker to link victim’s Instagram account to his Facebook page and then have full
Continue readingFacebook CSRF bug which lead to Instagram Partial account takeover.
Description This bug could allow an attacker to hijack the Websocket connection of a Facebook user who is using the
Continue readingCross-Site Websocket Hijacking bug in Facebook that leads to account takeover
Description This bug could allowed an attacker to takeover Facebook accounts by making a victim visit his website. This bug
Continue readingReflected XSS in graph.facebook.com leads to account takeover in IE/Edge
Description This bug could have allowed an attacker to execute HTML code in the server-side of the server tapprd.legal.thefacebook.com which would
Continue readingHTML to PDF converter bug leads to RCE in Facebook server.