Security expert Dan Melamed discovered a critical Facebook vulnerability would allow an attacker to take complete control over any account.