GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • HOME
  • CATEGORIES
  • TAGS
  • ARCHIVES
  • ABOUT

This view

  • Original page
  • New address

GeezerVison is showing blog.devploit.dev — Security Research & CTF Writeups

Jul 2, 2026 Mobile Security

Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug

What happens if an app without READ_CONTACTS asks Google Messages for Android to load a Contacts photo for it? The vulnerability I found did exactly that: before it was fixed, Messages read the protected ph...

Open writeup
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.