October 24, 2026 7 min read Vulnerability in Instagram Challenge System | Missing Rate Limit Causes Permanent Account Lockout via State Poisoning Vulnerabilities Read More about Vulnerability in Instagram Challenge System | Missing Rate Limit Causes Permanent Account Lockout via State Poisoning
July 25, 2026 7 min read Vulnerability in Instagram Followers & Following | Legacy GraphQL Endpoint Leaks Hidden Lists and Meta Verified Vulnerabilities Read More about Vulnerability in Instagram Followers & Following | Legacy GraphQL Endpoint Leaks Hidden Lists and Meta Verified
June 13, 2026 7 min read Session Isolation Bypass in Claude Code | Persistent Remote Tunnels Survive Account Switches via /login Vulnerabilities Read More about Session Isolation Bypass in Claude Code | Persistent Remote Tunnels Survive Account Switches via /login
May 27, 2026 7 min read Vulnerability in HostGator | OAuth State Injection Leaks Central SSO Tokens via postMessage Vulnerabilities Read More about Vulnerability in HostGator | OAuth State Injection Leaks Central SSO Tokens via postMessage
May 4, 2026 6 min read The “Ghost Admin” Bypass: Hijacking Meta Portfolios via Persistent Asset Sessions Vulnerabilities Read More about The “Ghost Admin” Bypass: Hijacking Meta Portfolios via Persistent Asset Sessions
April 9, 2026 3 min read Vulnerability in Meta Verified | Hijack Official Support Chats to Impersonate Instagram Staff Vulnerabilities Read More about Vulnerability in Meta Verified | Hijack Official Support Chats to Impersonate Instagram Staff
February 21, 2026 4 min read Meta Account Quality IDOR | How a Simple Deep-Link Can Kill Your Business Vulnerabilities Read More about Meta Account Quality IDOR | How a Simple Deep-Link Can Kill Your Business
February 18, 2026 5 min read Vulnerability in Facebook Ad Accounts | Delete Rejected Ads via Instagram Web to Bypass Policy Enforcement Vulnerabilities Read More about Vulnerability in Facebook Ad Accounts | Delete Rejected Ads via Instagram Web to Bypass Policy Enforcement
February 12, 2026 4 min read Vulnerability in Instagram Account Center | Persistent Linked Sessions Enable Full Account Takeover and 2FA Bypass Vulnerabilities Read More about Vulnerability in Instagram Account Center | Persistent Linked Sessions Enable Full Account Takeover and 2FA Bypass
January 5, 2026 4 min read Vulnerability in Mandiant Advantage | Hardcoded Google OAuth Secret Enables Unauthorized Token Exchange Vulnerabilities Read More about Vulnerability in Mandiant Advantage | Hardcoded Google OAuth Secret Enables Unauthorized Token Exchange
October 14, 2025 4 min read Vulnerability in Instagram Private Accounts | Collaborative Posts Discoverable Without Authorization Vulnerabilities Read More about Vulnerability in Instagram Private Accounts | Collaborative Posts Discoverable Without Authorization
June 10, 2025 3 min read Vulnerability in Meta Verified Accounts | Change Name and Username Without Review Vulnerabilities Read More about Vulnerability in Meta Verified Accounts | Change Name and Username Without Review
February 14, 2025 2 min read Bypass Instagram Username Review | Vulnerability in Meta Verified Accounts Vulnerabilities Read More about Bypass Instagram Username Review | Vulnerability in Meta Verified Accounts
January 28, 2025 4 min read Bypass Two-Factor Authentication in Meta Business Suite to Hijack Facebook Pages Vulnerabilities Read More about Bypass Two-Factor Authentication in Meta Business Suite to Hijack Facebook Pages
January 23, 2025 5 min read Vulnerability in Instagram IP Center | How I Spoofed Major Brands via Unverified Emails Vulnerabilities Read More about Vulnerability in Instagram IP Center | How I Spoofed Major Brands via Unverified Emails
December 23, 2024 4 min read Vulnerability in Instagram Challenge System | Bypassing the “Locked” Screen via URL Manipulation Vulnerabilities Read More about Vulnerability in Instagram Challenge System | Bypassing the “Locked” Screen via URL Manipulation
