17 matches found
CVE-2026-78905-Facebook-Account-Takeover
CVE-2026-78905 — 메타 피싱Meta-Phishing Facebook Graph API — OAuth 토큰 재사용 및 세션 하이재킹 필드| 값 ---|--- 심각도| 9.6 치명적 공격 벡터| 네트워크 영향받는 버전| Graph API v18.0 – v20.0 발견자| 𝕍𝕠𝕤𝕤🥷 설명 Facebook Graph API의 치명적인 취약점으로, 공격자가 여러 세션에 걸쳐 OAuth 토큰을 재사용할 수 있습니다. 이를 통해 사용자 상호작용 없이도 세션 하이재킹과 계정 탈취가 가능합니다. 기술적 세부 사항 Graph API...
CVE-2026-18056
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
EUVD-2026-72043
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-18056 HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-18056: Improper Authentication
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
Exploit for Type Confusion in Google Chrome
CVE-2026-78905 — Meta-Phishing Facebook Graph API — OAuth...
CVE-2026-35179 WWBN AVideo Unauthenticated Instagram Graph API Proxy via publishInstagram.json.php
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the SocialMediaPublisher plugin exposes a publishInstagram.json.php endpoint that acts as an unauthenticated proxy to the Facebook/Instagram Graph API. The endpoint accepts user-controlled parameters including an access...
EUVD-2024-1387
Malicious code in bioql PyPI...
CVE-2024-35232
github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...
CVE-2024-35232
github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...
CVE-2024-35232
The CVE-2024-35232 issue affects github.com/huandu/facebook, a Go package for Facebook Graph API usage. The root cause is that an access_token can be exposed in error messages during HTTP request failures, enabling potential information disclosure if logs or clients capture those messages. The vu...
Facebook Graph API SDK 安全漏洞
Facebook Graph API SDK is a Go package from the individual developer Huan Du in China. A security vulnerability exists in Facebook Graph API SDK versions prior to 2.7.2, which stems from the fact that accesstoken may be disclosed in an error message when an HTTP request fails...
gfbgraph security update
An update is available for gfbgraph. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME...
[SECURITY] Fedora 35 Update: gfbgraph-0.2.4-1.fc35
GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME Online Accounts...
Fedora: Security Advisory for gfbgraph (FEDORA-2021-9c737bb848)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for gfbgraph (FEDORA-2021-7cccd2784c)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...