41554 blogs · [ { "id": "01a0875a-6b70-730f-bb77-6426c8b6b0b4", "title": "Running Tesla Model 3’s Computer on My Desk Using Parts From Crashed Cars", "url": "https://bugs.xdavidhu.me/tesla/2026/03/23/running-tesla-model-3s-computer-on-my-desk-using-parts-from-crashed-cars/", "published_at": "2026-03-23T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426c93cd56a", "title": "Accidental $70k Google Pixel Lock Screen Bypass", "url": "https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/", "published_at": "2022-11-10T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426ca0a5e92", "title": "Fixing the Unfixable: Story of a Google Cloud SSRF", "url": "https://bugs.xdavidhu.me/google/2021/12/31/fixing-the-unfixable-story-of-a-google-cloud-ssrf/", "published_at": "2021-12-31T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426cae51d6a", "title": "4 Weird Google VRP Bugs in 40 Minutes (video)", "url": "https://bugs.xdavidhu.me/google/2021/10/08/4-weird-google-vrp-bugs-in-40-minutes/", "published_at": "2021-10-08T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426cb92d422", "title": "I Built a TV That Plays All of Your Private YouTube Videos", "url": "https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/", "published_at": "2021-04-05T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426cbfcc4b7", "title": "The Embedded YouTube Player Told Me What You Were Watching (and more)", "url": "https://bugs.xdavidhu.me/google/2021/01/18/the-embedded-youtube-player-told-me-what-you-were-watching-and-more/", "published_at": "2021-01-18T11:00:00+00:00" }, { "id": "01a0875a-6b70-730f-bb77-6426cc6f7581", "title": "Stealing Your Private YouTube Videos, One Frame at a Time", "url": "https://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time/", "published_at": "2021-01-11T11:00:00+00:00" }, { "id": "01a0875a-6b71-70f7-a6e5-f79ab1447b6f", "title": "The unexpected Google wide domain check bypass", "url": "https://bugs.xdavidhu.me/google/2020/03/08/the-unexpected-google-wide-domain-check-bypass/", "published_at": "2020-03-08T11:00:00+00:00" } ] posts Claim your blog
Back to bugs.xdavidhu.me - David Schütz's bug bounty writeups
Blog · corpus.blog/blogs/bugs.xdavidhu.me/posts

bugs.xdavidhu.me - David Schütz's bug bounty writeups

bugs.xdavidhu.me

2026

2022

2021

2020