Red Team & Penetration Testing (Public Sector)
Specialized in penetration testing and red team operations with a focus on practical attack simulations.Vulnerability Research
Researching security vulnerabilities in open-source software and developing PoC exploits.Security Training
Creating hands-on penetration testing labs and attack demonstration materials.| Identifier | Description |
|---|---|
| CVE-2026-59923 | XSS via percent-encoded javascript URI bypass in safe_url() |
| CVE-2026-59200 | Decompression Bomb DoS via PdfParser.PdfStream.decode() |
| CVE-2026-40491 | Arbitrary File Write via Path Traversal in gdown.extractall |
| CVE-2026-39376 | Infinite redirect loop DoS via meta-refresh chain |
| CVE-2026-35492 | Path traversal vulnerability in PartitionedDataset allows arbitrary file write |
| CVE-2026-34444 | Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr/setattr |
| CVE-2026-33752 | Redirect-based SSRF leading to internal network access in curl_cffi |
| CVE-2026-33310 | Command Injection via shell() Expansion in Parameter Defaults |
| CVE-2026-33147 | Stack-based Buffer Overflow in gmt_remote_dataset_id |
| CVE-2026-33154 | Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver |
| CVE-2026-29780 | Path Traversal in Official Example Script Leading to Arbitrary File Write |
| KVE-2026-0325 | Broken Access Control in org_part Enables Data Exposure |
| KVE-2026-0118 | Improper Access Control → Mass Data Exposure |
| KVE-2025-0243 | Hardcoded DB & Crypto Keys (Android) |
