5188 | How I Could Compromise 4% (Locked) Instagram Accounts |
IDOR
DoS
Authorization flaw |
Meta / Facebook |
Arne Swinnen (@ArneSwinnen) |
Bug Bounty | 2016-03-27 | 2023-06-13 |
5179 | Facebook movies recommendation vulnerability – A bug capable of erasing all your important notifications! |
Logic flaw
DoS |
Meta / Facebook |
Mohamed A. Baset |
Bug Bounty | 2016-05-05 | 2023-06-13 |
5061 | WhatsApp — Dos Vulnerability In iOS & Android |
DoS |
Meta / Facebook |
Vishnu Prasad P G (@vishnuprasadnta) |
Bug Bounty | 2017-06-07 | 2023-06-13 |
5043 | WhatsApp — DoS Vulnerability In iOS & Android |
DoS |
Meta / Facebook |
Vishnuraj |
Bug Bounty | 2017-07-07 | 2023-06-13 |
4858 | How I was able to remotely crash any android user’s instagram app and was paid a mere 500$ for it. |
Android
DoS |
Meta / Facebook |
Waleed Ahmed |
Bug Bounty | 2018-02-15 | 2023-06-13 |
4767 | Whatsapp- DOS vulnerability on Android/iOS/Web |
DoS |
Meta / Facebook |
Pratheesh P Narayanan (@PRATHEESH_PPN) |
Bug Bounty | 2018-05-15 | 2023-06-13 |
4704 | The $12,000 Intersection between Clickjacking, XSS, and Denial of Service |
Clickjacking
XSS
DoS |
Bustabit |
Sam Curry (@samwcyo) |
Bug Bounty | 2018-07-04 | 2023-06-13 |
4690 | Hacking thousands of companies through their helpdesk |
Account takeover
DoS
Logic flaw |
NA |
Khaled Hassan |
Bug Bounty | 2018-07-17 | 2023-06-13 |
4618 | A Infinite Loop Story. |
DoS |
NA |
Ashish Kunwar (@D0rkerDevil) |
Bug Bounty | 2018-08-29 | 2023-06-13 |
4515 | DoS on Facebook Android app using 65530 characters of ZERO WIDTH NO-BREAK SPACE. |
DoS |
Meta / Facebook |
Rahul Kankrale (@RahulKankrale) |
Bug Bounty | 2018-10-25 | 2023-06-13 |
4477 | Breaking Appointments and Job Interview Schedules With Malformed Times |
DoS |
Meta / Facebook |
Max Pasqua |
Bug Bounty | 2018-11-14 | 2023-06-13 |
4432 | Billion Laugh Attack in https://sites.google.com |
Billion laugh attack
DoS |
Google |
Antonio Sanso (@asanso) |
Bug Bounty | 2018-12-05 | 2023-06-13 |
4415 | Chaining Two Vulnerabilities to Break Facebook Appointment Times For the Second Time |
Logic flaw
Application-level DoS |
Meta / Facebook |
Max Pasqua |
Bug Bounty | 2018-12-14 | 2023-06-13 |
4293 | DoS on WAF Protected Sites by Abusing Cookie |
DoS |
Upwork |
Anas Mahmood (@AnasIsHere) |
Bug Bounty | 2019-02-18 | 2023-06-13 |
4243 | DoS Across Facebook Endpoints |
DoS |
Meta / Facebook |
Max Pasqua |
Bug Bounty | 2019-03-19 | 2023-06-13 |
4235 | Twitter Denial of Service bug or How i could prevent all followers from reading or accessing literally ANY tweets! |
DoS |
Twitter |
Seif Elsallamy (@seifelsallamy) |
Bug Bounty | 2019-03-25 | 2023-06-13 |
4234 | An Unusual Bug 🐛 on Braintree [PayPal] |
DoS |
Paypal |
PRince CHaddha (@princechaddha) |
Bug Bounty | 2019-03-25 | 2023-06-13 |
4196 | Banner Grabbing to DoS and Memory Corruption |
DoS
Information disclosure |
NA |
Daniel V. (@d4niel_v) |
Bug Bounty | 2019-04-16 | 2023-06-13 |
4174 | Denial of Service using Cookie Bombing |
DoS
Cookie bomb |
NA |
Ronak Patel (@ronak_9889) |
Bug Bounty | 2019-04-26 | 2023-06-13 |
4112 | Redstrom Denial Of Service — Write Up |
DoS |
NA |
Zerb0a |
Bug Bounty | 2019-06-12 | 2023-06-13 |
4058 | Facebook Vulnerability: Unremovable Co-Host in facebook page events |
Logic flaw
DoS |
Meta / Facebook |
Ritish Kumar Singh |
Bug Bounty | 2019-07-04 | 2023-06-13 |
4030 | How to lock a GitHub user out of their repos (bug or feature?) |
DoS |
GitHub |
Teserakt AG |
Bug Bounty | 2019-07-18 | 2023-06-13 |
3980 | Application Level Denial of Service [DoS] using SVG file in https://[REDACTED].com (Write Up) |
Application-level DoS |
NA |
Evan Ricafort (@evanricafort) |
Bug Bounty | 2019-08-10 | 2023-06-13 |
3922 | How two dead accounts allowed remote crash of any instagram android user |
DoS |
Meta / Facebook |
Valerio brussani (@val_brux) |
Bug Bounty | 2019-09-13 | 2023-06-13 |
3869 | CPDoS: Cache Poisoned Denial of Service |
DoS
Web cache poisoning |
Microsoft
Amazon
Akamai
Cloudflare
Yahoo! / Verizon Media
Play Framework |
Hoai Viet Nguyen (@hvnguyen86) |
Bug Bounty | 2019-10-22 | 2023-06-13 |