Meta / Facebook | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center	2FA / MFA Bypass Account Takeover	Meta / Facebook	Shuva Saha (@Scriptshuva)
500$ From Meta by reporting a HTMLi(Accidental Bug)	HTML Injection	Meta / Facebook	A.R Maheer
Stealing First Party Access Token of Facebook Users: Meta Bug Bounty	OAuth Account Takeover	Meta / Facebook	Saugat Pokharel (@Saugatscript)
Bypassing Account Suspension Using Anonymous Posting \| Facebook Bug Bounty	Authorization Bypass	Meta / Facebook	Ph.Hitachi
Back to the (Clip)board with Microsoft Whiteboard and Excalidraw in Meta (CVE-2023-26140)	XSS Security Code Review	Meta / Facebook Microsoft (Whiteboard) Excalidraw	Eugene Lim (@Spaceraccoonsec)
Add comment on a private Oculus Developer support	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Break saved option for other users in facebook – From N/A to valid bug	IDOR DoS	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Disclose latest stream video asset earnings for any gaming streamer page	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Disclose private mockups for other users in facebook Creative Hub	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
How I found a simple bug in Facebook events without any Test	Broken Access Control Logic Flaw	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Persistent Distorted Posts Issue and Unremovable Content in Facebook Group	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Send messages through notification to facebook & workplace users without getting blocked	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Sign up for Brand Collabs Manager on behalf of other page admins – Privilege Escalation	IDOR Privilege Escalation	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
How I found RXSS in Facebook, Twitter and Google training academy	Reflected XSS	Meta / Facebook Twitter Google Intellum	Sarmad Hassan (@JubaBaghdad)
Unauthorized Disclosure of Video Thumbnails in Facebook Workplace	IDOR	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Playing With Fire – How We Executed A Critical Supply Chain Attack On Pytorch	CI/CD Supply Chain Attack	PyTorch Meta / Facebook	John Stawinski Adnan Khan (@Adnanthekhan)
OAuth 2.0 Redirect URI Validation Falls Short, Literally	OAuth Path Confusion Open Redirect HTTP Parameter Pollution Account Takeover	Atlassian Meta / Facebook GitHub Microsoft Yahoo! / Verizon Media LinkedIn Slack VK LINE AuthDigital (Naver) OK ORCID	Tommaso Innocenti (@Innotommy) Matteo Golinelli Kaan Onarlioglu Ali Mirheidari Bruno Crispo Engin Kirda
How I could view any Facebook Groups Notes media, and they paid me a $10,000	IDOR	Meta / Facebook	Raja Sudhakar (@Rajasudhakar)
Bypassing Link Sharing Protection in Messenger Kids Parent’s Control Feature \| Meta Bug Bounty	URL Validation Bypass	Meta / Facebook	Syd Ricafort (@Devsyd11)
Facebook Creator Studio Misconfiguration $$$$	Session Expiration Issue	Meta / Facebook	Abdul Rehman Parkar
Accessing to Data Sources of any Facebook Business account via IDOR in GraphQL	IDOR GraphQL	Meta / Facebook	Mukund Bhuva (@MukundBhuva)
Facebook bug: A Journey from Code Execution to S3 Data Leak	RCE OS Command Injection	Meta / Facebook	Bipin Jitiya (@Win3zz)
Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation	Account Takeover PostMessage	Meta / Facebook	Youssef Sammouda (@Samm0uda)
Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing	Account Takeover OAuth Open Redirect	Meta / Facebook	Youssef Sammouda (@Samm0uda)
DOM-XSS in Instant Games due to improper verification of supplied URLs	DOM XSS	Meta / Facebook	Youssef Sammouda (@Samm0uda)

Page 1 of 22