@_xeloxa@Hacker0x01 Always check the status of the report you got duplication for
Because sometimes you will find the report has been closed as N/A
Happened to me
@_MrPlanB And how long did it takes from submitting till they told you it's a duplicate?
Because someone before had an accepted one for two month then they told him it's a dup.
So I'm asking if they also took a while with you before closing as a dup
@ArjeSec Make sure it's not hallucination because gemini is very convincing to the point you think you are inside a real system having rce while in real world it's just hallucinations but in a very professional way
Curl for a webhook and see if it's gonna hit it or not
A few months ago, I found a Prompt Injection vulnerability on Google Tasks.
It was simple, yet tricky.
Google rewarded me with a $15,000 bounty for it.
Here's the full story: