How I Found a $90,000 Remote Code Execution Vulnerability in Google A leaked Flask session signing secret let an attacker forge session cookies containing malicious pickled data, turning OAuth state handling into unauthentica… https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce
0 reposts0 likes