Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
2946Facebook page admin disclosure by "Message Seller" button (Bounty: 1500 USD) Information disclosure Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2020-12-262023-06-13
2941Facebook page admin disclosure by "Create doc" button (Bounty: 5000 USD) Information disclosure Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2020-12-282023-06-13
2929Patch. Bypass. Repeat: Story of a FaceBook Page Admin Disclosure bug worth $5000 Information disclosure Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2021-01-042023-06-13
2897Irremovable Facebook group album photos and entire album under certain circumstances (Bounty: 1000 USD) Logic flaw Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2021-01-142023-06-13
2272Bypassing 2-Factor Authentication for Facebook Business Manager (Bounty: 1000 USD) MFA bypass Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2021-08-312023-06-13
1871Missing rate-limiting. How I was able to add any unowned phone number to my Facebook account? (Bounty: 5000 USD) OTP bruteforce Lack of rate limiting Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2022-01-312023-06-13
743[WRITE-UP] Irremovable comments on the FB Lite app | A story of a simple FB Lite bug that I found just by observation (Bounty: 500 USD) Logic flaw Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2022-12-022023-06-13