Zomato: Reflected Cross-Site Scripting in www.zomato.com/php/instagram_tag_relay

https://www.zomato.com/php/instagramtagrelay is vulnerable to XSS via the callback parameter both POST and GET. PoC: https://www.zomato.com/php/instagramtagrelay?callback=%3Cscript%3Ealertdocument.domain%3C/script%3E In addition, when a Zomato user accesses the page after having connected his...

This 10-year-old Boy becomes the youngest Bug Bounty Hacker

"Talent has no Age Limit" That’s what I said for a 10-year-old Finnish boy on our official Facebook page while sharing his recent achievement with our readers i.e. Winning $10,000 bug bounty from Instagram. Last Tuesday when we at The Hacker News first acknowledged this talented boy and the flaw ...

10-Year-Old Instagram Bug Hunter Earns $10,000

A 10-year-old boy from Finland earned $10,000 after discovering an API bug that allowed him to erase Instagram comments from any account. Facebook confirmed to Threatpost the boy, who goes by the name “Jani”, discovered the bug in late February and received the payout in early March from Facebook...

WordPress Instagram Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress Instagram Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

From the deserialization vulnerability to take control of the Empire: millions of dollars of Instagram vulnerability-vulnerability warning-the black bar safety net

2 0 1 2 years, Blloberg in the Facebook white hat reward program's website published a famous article, mentioned in the article:“if Facebook shows the value of millions of dollars of vulnerability,we also wishes to do a single full pay”in. In this article before you start, I want to cheat click...

Grab for Instagram - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Grab for Instagram published at the 'play' market has multiple vulnerabilities...

Instatistics-Instagram tracker - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Instatistics-Instagram tracker published at the 'play' market has multiple vulnerabilities...

Free instagram followers - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free instagram followers published at the 'play' market has multiple vulnerabilities...

Letstag - Instagram hashtags - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Letstag - Instagram hashtags published at the 'play' market has multiple vulnerabilities...

iGetter for Instagram - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application iGetter for Instagram published at the 'play' market has multiple vulnerabilities...

Followers+ For Instagram - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Followers+ For Instagram published at the 'play' market has multiple vulnerabilities...

Repost for Instagram - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Repost for Instagram published at the 'play' market has multiple vulnerabilities...

TrackGram: Instagram Followers - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TrackGram: Instagram Followers published at the 'play' market has multiple vulnerabilities...

Like Manager for Instagram - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Like Manager for Instagram published at the 'play' market has multiple vulnerabilities...

ML - Instagram likes - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application ML - Instagram likes published at the 'play' market has multiple vulnerabilities...

No Crop Video Editor Instagram - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application No Crop Video Editor Instagram published at the 'play' market has multiple vulnerabilities...

Photo Saver For Instagram - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Photo Saver For Instagram published at the 'play' market has multiple vulnerabilities...

No Crop & Square for Instagram - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application No Crop & Square for Instagram published at the 'play' market has multiple vulnerabilities...

Video Collage for Instagram - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video Collage for Instagram published at the 'play' market has multiple vulnerabilities...

Quotes for Instagram - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Quotes for Instagram published at the 'play' market has multiple vulnerabilities...