Published inInfoSec Write-upsPrivacy Disclosure on m.facebook.com after add photo to the postVuln Type Privacy / AuthorizationFeb 9Feb 9
Identify user_id by email address in Meta QuestVuln Type Identification / DeanonymizationOct 4, 20221Oct 4, 20221
Pages banned by other pages is still able to take action on event(comment+post)Vuln Type Privacy / AuthorizationMar 20, 2022Mar 20, 2022
Published inInfoSec Write-ups[IDOR ] enable “Allow Facebook stories shared from Instagram to tag my page “ as non adminProduct AreaAug 22, 2021Aug 22, 2021
![[IDOR ] enable “Allow Facebook stories shared from Instagram to tag my page “ as non admin](https://miro.medium.com/v2/resize:fill:80:53/1*et0gAYk0FRezF8ZignsX2w.jpeg)
![[IDOR ] enable “Allow Facebook stories shared from Instagram to tag my page “ as non admin](https://miro.medium.com/v2/resize:fill:160:107/1*et0gAYk0FRezF8ZignsX2w.jpeg)
