Google Developer Site

A security researcher has disclosed finding a remote code execution vulnerability in Google's developer site, reportedly earning a $90,000 bounty through Google's bug bounty program. According to the writeup, the flaw involved Flask session pickle deserialization, which could allow attackers to run arbitrary code on the service. The disclosure has drawn widespread attention among security professionals.