Post

Today I'm publishing my writeup about a number of security issues I reported last September to Zigazoo, the self-described "World's Largest Social Network for Kids!". Impact included access to all user records, uploaded media (inc deleted items), account escalation, and user impersonation.

amenbreakpoint.comZigazoo too, Another Firebase BoogalooGCP security at "The World's Largest Social Network for Kids!"

21/7/25, 1:52 pm9 reposts28 likes

Jesse Emond (@dysleixa)

@dysleixa.bsky.social

23 July 2025

Solid writeup & important work, thanks for sharing! Concerning security response for such an app, to say the least...