Yhn TechnologyCybersecurity first seen 1 d ago, last 7 min ago, peak #1

Security researcher reports $90,000 remote code execution flaw in Google

Original: I Found a $90k Remote Code Execution Vulnerability in Google

A security researcher has disclosed a remote code execution vulnerability in Google's developer site, reporting it earned a $90,000 bounty through Google's bug reward program. The write-up describes how a Flask session and Python pickle deserialization issue could be chained into full remote code execution. The disclosure is drawing attention for the size of the payout and the technical detail of the exploit chain.

Why now: A detailed write-up of a high-payout vulnerability in Google is fresh news for the security community.

GoogleSimon KoeckGoogle Bug Bounty Program

Open on hn →

Rank over time, top of the chart is #1. 88 snapshots from 1 d ago to 7 min ago.

Evidence

• I Found a $90k Remote Code Execution Vulnerability in Google · soeckly · 232

API: https://socialmediatrends-api.osmike.com/v1/trends/1990686