Posts tagged with #dos

• 🔒 Zero-Click Phishing & Email DoS via Google's Identity Toolkit

  Mar 10, 2026 (next week) 1000 rvfet

  

  abuse-vrp dos phishing writeups

  Affected Company:

  Google

  How I discovered a logic flaw in Google's Identity Toolkit that allowed unauthenticated attackers to send unlimited official security notifications with content injection for high-fidelity phishing and DoS.

  Full Write-up

• P2/S2 Unauthenticated Redirect Loop Leading to DoS In Google Image Proxy

  Feb 25, 2026 (4 days ago) 1000 rvfet

  

  abuse-vrp dos ssrf writeups

  Affected Company:

  Google

  How I discovered a logic flaw in Google's internal proxy service that led to unauthenticated, attribution-free DDoS amplification and infrastructure resource exhaustion.

  Full Write-up

• CVSS 6.5 Persistent State Corruption in Linear.app

  Dec 10, 2025 (3 months ago) 1000 rvfet

  

  logic-bug graphql dos writeups

  Affected Company:

  Linear.app

  How I discovered a logic flaw in Linear.app's optimistic UI architecture that allowed authenticated users to permanently 'brick' other accounts via ID collision, resulting in a persistent Denial of Service (DoS) with no recovery path.

  Full Write-up