Two major vulnerabilities in Google's business intelligence platform, Looker, could expose firms to data theft and system takeover, according to a report.