I Found a $90k Remote Code Execution Vulnerability in Google(simonkoeck.com)
204 points by soeckly | 101 comments
A security writeup describing how a self-contained Flask session secret on Google DevSite enabled forged sessions and remote code execution across seven Google domains for a $90,000 bounty.