Back to directory
WRITEUP #4243

User’s private watched videos/saved videos exposed through a messenger call from a locked smartphone.

ReconInformation disclosureBroken authorization
by@samiparyal_(Samip Aryal)
Bounty
500
Program
Meta / Facebook
Published
Nov 13, 2020
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://medium.com/@aryalsamipofficial59/users-private-watched-videos-list-saved-videos-etc-30faa8610b33
▸ RELATED WRITEUPS
How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System
ReconMissing authentication
P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!
ReconInformation disclosure
How I Got Bugs From Google Dorks
ReconInformation disclosure
How I can easily get four P1 at NASA using Simple Google Dorking.
ReconInformation disclosure
$1600 Bounty on a Main Domain
ReconSession fixation

Built with ❤️ by Shubham Rawat