Get the latest tech news

I Found a $90k Remote Code Execution Vulnerability in Google


A Flask cookie on developers.google.com was signed with a secret it was also carrying inside itself. Pulling that secret out turned a forged session into code execution across seven Google domains.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Google

Google

Photo of 90k

90k

Related news:

News photo

Fitbit Edge is Google’s middle ground between Fitbit Air and Pixel Watch

News photo

Google's Fitbit Edge brings Pixel Watch features for less

News photo

Google’s Fitbit Edge Sits Between a Fitbit Air and Pixel Watch 5