Sreeram KL (@Kl_sree) | writeups.xyz

Title	Vulnerabilities	Programs	Authors
XSS using postMessage in Google Cloud Theia notebooks [Google VRP]	XSS PostMessage	Google	Sreeram KL (@Kl_sree) Sivanesh Ashok (@Sivaneshashok)
Bypassing authorization in Google Cloud Workstations [Google VRP]	Account Takeover OAuth URL Validation Bypass	Google	Sivanesh Ashok (@Sivaneshashok) Sreeram KL (@Kl_sree)
SSH key injection in Google Cloud Compute Engine [Google VRP]	OS Command Injection RCE	Google	Sivanesh Ashok (@Sivaneshashok) Sreeram KL (@Kl_sree)
Stealing Google Drive OAuth tokens from Dropbox	CSRF SSRF Account Takeover	Dropbox	Sivanesh Ashok (@Sivaneshashok) Sreeram KL (@Kl_sree)
[Google VRP] Hijacking Google Docs Screenshots	PostMessage XSS	Google	Sreeram KL (@Kl_sree)
How I got $13337 bounty From Google	Weak Credentials	Google	Sreeram KL (@Kl_sree)

Page 1 of 1