Rebeauty Atlas는 무엇인가요?

Rebeauty Atlas는 AI·디자인·마케팅·경제·의료 등 다양한 주제의 Medium 아티클을 수집해 태그·트랙·위키·인사이트로 탐색할 수 있게 정리한 리서치 아카이브입니다.

글은 어떻게 모이나요?

Rebeauty Atlas는 Medium에 공개된 아티클을 자동 수집해 AI·디자인·마케팅·경제·의료 등 주제별 태그·트랙·위키로 정리하는 리서치 아카이브입니다.

사이트는 어떤 섹션으로 구성되어 있나요?

Articles · Wiki · Insights · Tags 섹션으로 구성되어 있으며, PHP MVC · MySQL · shadcn-style UI · Wiki via keyword rules 로 만들어졌습니다.

Articles · Rebeauty Atlas

RO Rohmad Hidayah

IDOR allows non-group members to add any group to favorites on their Facebook profile

Allows users who are not members of a group to add any group to their favorites on their Facebook profile.

Jun 09, 2026 · 2 min read · 0 claps #bug-bounty-writeup #meta-bug-bounty #idor

ECO HUM

AB Abu Idris Al-Muhaqqiq · InfoSec Write-ups

[BAC] Improper Authorization in Public Facebook Groups

While testing access control mechanisms in Facebook Groups, I started with a simple assumption: each role should have clearly defined…

Mar 31, 2026 · 3 min read · 55 claps #meta-bug-bounty #facebook-bug-bounty #broken-access-control

[BAC] Improper Authorization in Public Facebook Groups

SOC

AB Abu Idris Al-Muhaqqiq · InfoSec Write-ups

Ability to Add Non-Friends as Co-Hosts in Facebook Group Events

It is possible to add users who are not friends as co-hosts in group events, despite Facebook documentation stating that only friends can…

Mar 12, 2026 · 2 min read · 5 claps #business-logic-flaw #facebook-bug-bounty #meta-bug-bounty

Ability to Add Non-Friends as Co-Hosts in Facebook Group Events

SOC

AB Abu Idris Al-Muhaqqiq · InfoSec Write-ups

Bypassing Threads Block System: Blocked Users Can Still View Custom Feed Content

A blocked user can still access and view content from the blocking user’s public custom feed by manipulating a request when pinning a feed…

Mar 11, 2026 · 2 min read · 61 claps #business-logic-flaw #meta-bug-bounty #facebook-bug-bounty

Bypassing Threads Block System: Blocked Users Can Still View Custom Feed Content

SOC

AB Abu Idris Al-Muhaqqiq

Canceled Facebook Event Name Can Still Be Modified via GraphQL API by Co-Host

A canceled Facebook event is expected to be non-editable according to Facebook’s UI messaging and official documentation. However, a co-host

Feb 09, 2026 · 2 min read · 0 claps #business-logic #business-logic-flaw #meta-bug-bounty

Canceled Facebook Event Name Can Still Be Modified via GraphQL API by Co-Host

SA Samip Aryal · InfoSec Write-ups

Call/Message anyone on Facebook directly, bypassing the message requests ($$$$+$$$$$)

An Interesting bug on a not-so-interesting Meta Platform — Messenger Kids

Dec 09, 2025 · 5 min read · 488 claps #facebook-bug-bounty #meta-bug-bounty #bug-bounty

Call/Message anyone on Facebook directly, bypassing the message requests ($$$$+$$$$$)

TCH

SY Syd Ricafort (0cod3)

Deleted Story Replies Are Not Actually Deleted: Meta Bug Bounty (500 USD)

I accidentally discovered a vulnerability in FB4A while I was normally using Facebook. While I was viewing my story created I noticed my…

Dec 02, 2025 · 1 min read · 55 claps #meta-bug-bounty #facebook #meta

Deleted Story Replies Are Not Actually Deleted: Meta Bug Bounty (500 USD)

TCH

HI Hisham

the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(part 3)

I was able to bypass this security within Facebook’s Page Roles.

Oct 10, 2025 · 2 min read · 0 claps #bug-bounty #meta-bug-bounty #bugcrowd

the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(part 3)

TCH

HI Hisham

the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(part 2)

I was able to bypass this security within Facebook’s Page Roles

Oct 10, 2025 · 2 min read · 0 claps #bug-bounty #meta-bug-bounty #bugcrowd