Yhn TechnologyCybersecurity first seen 2 d ago, last 19 min ago, peak #1

Researcher reports $90,000 remote code execution bug in Google

Original: I Found a $90k Remote Code Execution Vulnerability in Google

Security researcher Simon Koeck has published a write-up describing a remote code execution vulnerability he found in Google's developer site, reportedly earning a $90,000 bounty through Google's bug bounty programme. The flaw involved Flask session pickle deserialization, a technique that can let attackers run arbitrary code on a server. The detailed technical write-up is drawing attention in the security community.

Why now: A high-severity vulnerability in Google with an unusually large $90,000 bounty is a notable security disclosure.

GoogleSimon KoeckGoogle Bug BountyFlask

Open on hn →

Rank over time, top of the chart is #1. 17 snapshots from 11 h ago to 19 min ago.

Evidence

• I Found a $90k Remote Code Execution Vulnerability in Google · soeckly · 237

API: https://socialmediatrends-api.osmike.com/v1/trends/1990686