In FB group there is an option for document edit with collaboration and group member can delete document while collaboration enabled or author of current edit(if member edited previously), General...

Summary: One of the top most phone company has info Disclosure vulnerability in there inbuilt sms app. Javascript Bridge/Interface: The JavaScript to Java bridge (a.k.a. JavascriptInterface) is a ...

Summary: If receiver blocked sender, still sender was able to send message. One of giant company’s mobile chat app has functionality to send free sms and when sender send free sms then mobile assi...

Summary: It was possible to delete facebook users draft and settings using DoS with zero width no-break space. Step to reproduce: Create draft post in facebook android app as well as set setti...

Summary: com.twitter.android.lite.TwitterLiteActivity was set to exported, data passed to intent was not validated and its web view has JSInterface that available to any URL which was loaded throug...

Summary: This could have let a malicious user spoof the URL bar of multiple Facebook Android apps by navigating to a different domain on the original tab after a new tab had been opened using the s...