login sign up

Blog

by @pubkey · 25 nodes · curated
October 12, 2026
Google DevSite RCE: a Flask session cookie carried the OAuth secret it was signed with, so forging a pickle session took two GET requests simonkoeck.com · Oct 12 simonkoeck.com · Oct 12
2 people saved or upvoted this
← →