Posts tagged with #abuse-vrp

• 🔒 Zero-Click Phishing & Email DoS via Google's Identity Toolkit

  Mar 10, 2026 (next week) 1000 rvfet

  

  abuse-vrp dos phishing writeups

  Affected Company:

  Google

  How I discovered a logic flaw in Google's Identity Toolkit that allowed unauthenticated attackers to send unlimited official security notifications with content injection for high-fidelity phishing and DoS.

  Full Write-up

• P2/S2 Unauthenticated Redirect Loop Leading to DoS In Google Image Proxy

  Feb 25, 2026 (4 days ago) 1000 rvfet

  

  abuse-vrp dos ssrf writeups

  Affected Company:

  Google

  How I discovered a logic flaw in Google's internal proxy service that led to unauthenticated, attribution-free DDoS amplification and infrastructure resource exhaustion.

  Full Write-up