The Google App Engine SDK for Python suffers from a code execution vulnerability that can be leveraged by a CSRF vulnerability.
519d4382361dcafef4cd129e1fe1de30dc932146ee9e653e859c5c913ba55657
Whitepaper called Dangling Pointer - Smashing the Pointer for Fun and Profit.
c5394ccb409d73e8c3160eb2e8baf9c5ecbb24ca4a80fc5620e7ae506f57f653