This bug could allowed a malicious user to generate access tokens for any Facebook user.

This bug reported to Facebook could allowed an attacker to read the list of all Facebook users who signed up

Continue readingModify users profiles of techprep.fb.com

This bug found in one of Facebook domains (api.techprep.fb.com) could allowed an attacker to upload files to the server. All

Continue readingUploading files to api.techprep.fb.com