Facebook BB #18 - IDOR Issue & Privacy Vulnerability

Document Title: =============== Facebook BB 18 - IDOR Issue & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID VL-ID:...

Facebook BB #18 - IDOR Issue & Privacy Vulnerability

Document Title: =============== Facebook BB 18 - IDOR Issue & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID VL-ID:...

Eobot: IDOR on https://www.eobot.com/paypal

POC :- video attached...

Meta: IDOR in Facebook Messages webcam photos

I found that photos people take with their webcam within private message conversations can be accessed without proper authorization via a photo preview mechanism. Even when the sender decides to discard the image after seeing the preview, it can later still be retrieved through this same preview...