Awesome Google VRP Writeups

New Google VRP writeup "1-click Oauth client takeover through henhouse UI" for a bounty of $13,340 by rand0m_unk0wn: random-unknown-username.github.io/random-unknown…

New Google VRP writeup "Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panel" for a bounty of $7,000 by @weizmangal: unit42.paloaltonetworks.com/gemini-live-in…

New Google VRP writeup "Weaponizing NotebookLM: How a Harmless Intent Can Silently Brick Your System Storage" for a bounty of $0 by Sandiyo Christan: @sandichrist6/weaponizing-notebooklm-how-a-harmless-intent-can-silently-brick-your-system-storage-293df02fe891" target="_blank" rel="nofollow noopener">medium.com/@sandichrist6/…

New Google VRP writeup "Hacking Google Support: Leaking millions of customer records" for a bounty of $14,337 by @michaeldaltonau: michaeldalton.au/posts/hacking-…

New Google VRP writeup "Remote Command Execution in Google Cloud with Single Directory Deletion" for a bounty of $??? by @ryotkak: flatt.tech/research/posts…

New Google VRP writeup "LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities" for a bounty of $??? by @terminatorLM: tenable.com/blog/leakylook…

New Google VRP writeup "LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)" for a bounty of $??? by @terminatorLM: tenable.com/blog/google-lo…

New Google VRP writeup "GeminiJack: the google gemini zero-click vulnerability leaked gmail, calendar and docs data" for a bounty of $??? by @sasi2103: noma.security/blog/geminijac…

New Google VRP writeup "Remote Command Execution in Google Cloud with Single Directory Deletion" for a bounty of $??? by @ryotkak: flatt.tech/research/posts…

New Google VRP writeup "LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities" for a bounty of $??? by @terminatorLM: tenable.com/blog/leakylook…

New Google VRP writeup "LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)" for a bounty of $??? by @terminatorLM: tenable.com/blog/google-lo…

New Google VRP writeup "GeminiJack: the google gemini zero-click vulnerability leaked gmail, calendar and docs data" for a bounty of $??? by @sasi2103: noma.security/blog/geminijac…

New Google VRP writeup "Privilege Escalation via a Service Account Impersonation Chain" for a bounty of $??? by @j_domeracki: jdsec.cloud/posts/2026-01-…

New Google VRP writeup "Hacking Gemini: A Multi-Layered Approach" for a bounty of $20,000 by @valent1nee: buganizer.cc/hacking-gemini…

New Google VRP writeup "CVE-2025-12080 — Intent Abuse in Google Messages for Wear OS for Silent Message Sending" for a bounty of $??? by @Io_no__: towerofhanoi.it/writeups/cve-2…

New Google VRP writeup "The Trifecta: How Three New Gemini Vulnerabilities in Cloud Assist, Search Model, and Browsing Allowed Private Data Exfiltration" for a bounty of $??? by @terminatorLM: tenable.com/blog/the-trife…

New Google VRP writeup "Google Cloud Account Takeover via URL Parsing Confusion" for a bounty of $??? by Mohamed Benchikh: infosecwriteups.com/google-cloud-a…

New Google VRP writeup "Exploiting YouTube’s Permission Model : A Privilege Escalation case" for a bounty of $500 by Prakhar0x01 (𝙶𝚑𝚘𝚜𝚝 🇮🇳): prakhar0x01.github.io/write-ups/2025…

New Google VRP writeup "Controlling the Google Assistant via Web Speech API (Awarded $3133.7)" for a bounty of $3,133.7 by @ndevtk: ndevtk.github.io/writeups/2025/…

New Google VRP writeup "Client-side RCE via CSS Injection in Google Web Designer for Windows" for a bounty of $3,500 by Bálint Magyar: balintmagyar.com/articles/googl…