$ ls -la ./findings

Portfolio & Findings

Selected acknowledgements, public CVEs, and writeups. Many engagements are under NDA — what's listed here is everything publicly disclosable.

Acknowledgements

Hall of Fame

Programs that have publicly thanked me for responsibly disclosed findings.

Google

Microsoft

Apple

Coordinated vulnerability disclosures with assigned CVE identifiers.

CVE	Product	Severity	Note
CVE-202X-XXXXX	Vendor Product A	High	Authentication bypass via JWT confusion.
CVE-202X-XXXXX	Open-Source Library B	Medium	Prototype pollution leading to RCE under specific config.
CVE-202X-XXXXX	SaaS Platform C	Critical	IDOR exposing tenant-scoped financial records.

Highlights

A handful of bugs that taught me something new about how systems break.

Public bounty program·Critical

Replayed a leaked state parameter to bind an attacker code to a victim session. Required a nuanced understanding of the program's identity stack.

Private engagement·High

An undocumented mutation accepted role fields silently dropped at the schema layer — but persisted at the resolver. Full role escalation.

Public bounty program·Critical

Chained a thumbnail-render SSRF into IMDSv1 access and ultimately read short-lived credentials. Reported and patched within 48 hours.