pranav

Pranav Hivarekar

NOOB | SECURITY RESEARCHER | PUBLIC SPEAKER

Facebook's Bug - Unauthorized access to credit/prepaid card details (limited) of any user

Posted by Pranav Hivarekar on Feb 11, 2017

Facebook's Bug - Delete any video from Facebook

Posted by Pranav Hivarekar on Jun 23, 2016

Facebook's Bug - Fooling Graph Search to Bypass Privacy Restrictions & Extract Private Information

Posted by Pranav Hivarekar on Feb 20, 2016

DropBox's Critical Bug - App having ONLY access to `App folder` being able to post and enumerate files in/of any folder

Posted by Pranav Hivarekar on Jun 21, 2015

Facebook's API Bug - Exposure of `unpublished links` over graph api

Posted by Pranav Hivarekar on May 08, 2015

Facebook's API Bug - Add/Remove `videos` from `video playlists` using an `user access_token` with `public_profile` permissions

Posted by Pranav Hivarekar on Apr 03, 2015

Facebook's API Bug - Delete a photo posted on a page using an `user access_token` withOUT `manage_pages` permissions

Posted by Pranav Hivarekar on Apr 01, 2015