Just another security blog | writeups about mobile (android & iOS), web vulnerabilities, coordinated disclosures – by RahulKankrale
Category about web vulnerabilities.
Facebook Linked Publications ( Authorship or Author Tag ) feature was designed to give journalists more credit and visibility for the articles they were writing, regardless of where they were being published and it resulted in the byline that you saw in many posts, as well as the ability to easily follow that journalist and see when they shared new articles publicly.
Continue reading “[IDOR] add or remove the linked publications from Author Publisher settings — Facebook Bug Bounty”Summary : Mitron app which recently brought attention because of in less time 5 Million downloads and competitors to TikTok,
But this app is designed with no security at all, lets come to the proof of concept
In FB group there is an option for document edit with collaboration and group member can delete document while collaboration enabled or author of current edit(if member edited previously),
Continue reading “Facebook group document deletion bug using only_author_may_edit parameter”