corpus.blog
41554 blogs · [ { "id": "01a08c65-ff07-73db-99f6-53d4b04eeb99", "title": "Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK", "url": "https://ysamm.com/uncategorized/2026/01/17/math-random-facebook-sdk.html", "published_at": "2026-01-16T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b0a1e580", "title": "Instagram account takeover via Meta Pixel script abuse", "url": "https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html", "published_at": "2026-01-15T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b1517b8c", "title": "Multiple cross-site leaks disclosing Facebook users in third-party websites", "url": "https://ysamm.com/uncategorized/2026/01/16/cross-site-leaks.html", "published_at": "2026-01-15T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b1dfe59a", "title": "Leaking Meta FXAuth Token leading to 2 click Account Takeover", "url": "https://ysamm.com/uncategorized/2026/01/16/leaking-fxauth-token.html", "published_at": "2026-01-15T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b21f2752", "title": "Two-click Facebook account takeover via FXAuth token and blob theft", "url": "https://ysamm.com/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html", "published_at": "2026-01-14T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b24fc777", "title": "Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers", "url": "https://ysamm.com/uncategorized/2026/01/15/self-xss-facebook-payments.html", "published_at": "2026-01-14T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b25161a1", "title": "Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery", "url": "https://ysamm.com/uncategorized/2026/01/15/steal-dtsg-cookie.html", "published_at": "2026-01-14T22:00:00+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b31edec3", "title": "Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover", "url": "https://ysamm.com/uncategorized/2026/01/13/capig-xss.html", "published_at": "2026-01-13T12:04:43+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b3fb3387", "title": "Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation", "url": "https://ysamm.com/uncategorized/2023/01/29/account-takeover-in-canvas-apps-served-in-comet-due-to-failure-in-cross-window-message-origin-validation.html", "published_at": "2023-01-29T12:04:55+00:00" }, { "id": "01a08c65-ff07-73db-99f6-53d4b41ee11e", "title": "DOM-XSS in Instant Games due to improper verification of supplied URLs", "url": "https://ysamm.com/uncategorized/2023/01/29/dom-xss-in-instant-games-due-to-improper-verification-of-supplied-urls.html", "published_at": "2023-01-29T12:04:43+00:00" } ] posts Claim your blog
Back to ysamm.com
Blog · corpus.blog/blogs/ysamm.com/posts

ysamm.com

ysamm.com

2026

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDKoriginal ↗
16 Jan 2026
Instagram account takeover via Meta Pixel script abuseoriginal ↗
15 Jan 2026
Multiple cross-site leaks disclosing Facebook users in third-party websitesoriginal ↗
15 Jan 2026
Leaking Meta FXAuth Token leading to 2 click Account Takeoveroriginal ↗
15 Jan 2026
Two-click Facebook account takeover via FXAuth token and blob theftoriginal ↗
14 Jan 2026
Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeoversoriginal ↗
14 Jan 2026
Datr cookie theft and AI leads to Facebook account takeover via trusted device recoveryoriginal ↗
14 Jan 2026
Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeoveroriginal ↗
13 Jan 2026

2023

Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validationoriginal ↗
29 Jan 2023
DOM-XSS in Instant Games due to improper verification of supplied URLsoriginal ↗
29 Jan 2023