Facebook Oauth token leakage
Business LogicFacebook$7.5k4y ago
OAuth token leakage — a flow bug that hands out valid access tokens.
yaala · Medium ↗The ledger
Bounty writeups.
Real disclosed-bounty writeups — every entry states a real bounty, verified live against the article before it's listed. Dead links are dropped automatically.
44 writeups · $585.5k in bounties · checked today
Abusing Facebooks Call To Action To Launch Internal Deeplinks
Business LogicFacebook$4k4y ago
Abusing Call-To-Action buttons to launch internal deeplinks from the app.
Ashley King · ash-king.co.uk ↗How I Discovered a Critical Unauthorized Balance Top-Up Vulnerability Worth $3,000
Business Logicprogram unnamed$3k3mo ago
Unauthorized balance top-up — a critical business-logic flaw, step by step.
0x0sadat · Medium ↗The $2,000 Bug That Changed My Life: a Tiny URL Parameter Broke Web-Store Pricing
Business Logicprogram unnamed$2k1y ago
Price-manipulation logic bug found by poking a single URL parameter.
Helmiriahi · InfoSec Write-ups ↗Every bounty amount, date and link was verified against the original article before listing; articles are re-checked every 24 hours and dropped if they go offline. Content belongs to the original authors.