bug-bounty621
facebook431
xss316
google103
rce101
csrf60
microsoft59
web354
account-takeover53
writeup50
apple42
sqli41
cve35
ssrf34
exploit33
dos31
privilege-escalation28
defi28
cloudflare27
smart-contract-vulnerability25
idor24
subdomain-takeover24
ethereum23
clickjacking23
smart-contract23
vulnerability-disclosure21
access-control21
auth-bypass19
malware19
remote-code-execution18
lfi17
cors16
race-condition15
cloud15
reverse-engineering14
authentication-bypass14
solidity14
oauth12
browser12
info-disclosure12
aws12
sql-injection11
delegatecall11
denial-of-service11
phishing11
web-application-security10
vulnerability9
buffer-overflow9
web-security9
token-theft9
0
Redcentric offers comprehensive penetration testing services including infrastructure, application, mobile, and social engineering assessments to identify and remediate security vulnerabilities before exploitation. Their approach combines manual testing techniques with business logic analysis to provide actionable security insights and regulatory compliance support.
penetration-testing
vulnerability-assessment
security-testing
infrastructure-testing
application-security
mobile-security
code-review
social-engineering
phishing
network-security
compliance
security-services
Redcentric
0
vulnerability
Site-wide CSRF vulnerability discovered on Messenger.com where CSRF token (fb_dtsg) validation was completely missing on multiple endpoints, allowing attackers to perform unauthorized actions like changing settings and removing users from group threads. The vulnerability affected all POST requests regardless of whether the token was modified, removed, or omitted entirely.
csrf
cross-site-request-forgery
messenger
facebook
token-validation
security-testing
bug-bounty
web-security
ajax
post-request
messenger.com
Facebook
@phwd
@mazen160
fb_dtsg
XMessengerDotComSettingsEditController