I only read the past bugs reported to google and facebook, and read in depth about OAUTH.
1. http://homakov.blogspot.in/2013/02/hacking-facebook-with-oau...
2. http://www.nirgoldshlager.com/2013/02/how-i-hacked-facebook-...
3. https://medium.com/@atom/a-simple-bug-on-facebook-that-is-wo...