Google Extensions (Awarded $18833.7)
Target Program: Google, Proton AG
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Eugene Lim (@spaceraccoonsec)Universal Code Execution by Chaining Messages in Browser Extensions
pentester.land
by Pierre Kim (@PierreKimSec)17 vulnerabilities in Sharp Multi-Function Printers
pentester.land
by Stefan Schiller (@scryh_)Who are you? The Importance of Verifying Message Origins
pentester.land
by Wladimir Palant (@WPalant)