Bug Bounty Writeups
Writeups by Yess
Reportes detallados de vulnerabilidades reales encontradas en programas de Bug Bounty. Aprende de casos reales con impacto crítico.
Critical
Google
Sep 15, 2021
8 min
DRM Bug Bounty: Downloading Any Ebook from Google Play Store for Free
How I was able to download any ebook from Google Play Store without paying for it by abusing the bookmark API endpoint — found in just 10 minutes.
DRM
API Abuse
Google
Bug Bounty
High
Google AI VRP
Oct 17, 2026
15 min
Flow Music Spaces allows attacker-controlled nested iframes to record and store Camera/Microphone data and XSS to access privileged postMessage APIs
Two independent trust-boundary issues allow attacker-controlled AI-generated Spaces to capture and store camera/microphone recordings and access privileged Flow Music postMessage APIs.
AI Security
XSS
postMessage
Riffusion
Google AI VRP
Especial Halloween 2026 / Día de Muertos
El iceberg de las inteligencias artificiales más perturbadoras de Internet
Siete niveles de oscuridad, desde los mercados clandestinos hasta los experimentos que nunca debieron salir de un laboratorio.
AI Security · Deep web · Especial 2026Entrar al iceberg