News2026-10-13 11:35 UTC

How I Found a $90,000 Remote Code Execution Vulnerability in Google

A Google DevSite flaw stored an OAuth secret in a readable Flask session cookie, enabling unauthenticated code execution; the issue was fixed and earned a $90k bounty.

More News

10-13 11:35 UTCMeta Introduces Muse Wonder and Muse Wonder Full
10-13 11:35 UTCCan We Make React Faster Using the React Compiler?
10-13 11:35 UTCBuilding Shared Workspaces for People and Agents
10-13 11:35 UTC38 Things We’ve Learned About Building AI Products
10-13 11:30 UTCAirnode: Free, Open-Source Solution for Blockchain Smart Contracts