#vulnerability

1 page search “vulnerability” ↳ all tags

Wiki 1

Google OAuth domain-takeover flaw (Truffle Security, Jan 2025) Buying a dead startup's domain for $12 lets you re-create old employee emails on Workspace and log into the dead company's Slack/Notion/Zoom via "Sign in with Google" — initially marked won't-fix, $1,337 bounty after public pressure