Summary I demonstrated remote code execution (RCE) on Google’s CI infrastructure with just two pull requests (PR) to their microservices-demo repository. The second PR auto-triggered on a self-hos...
My Journey into AI Security On November 5, 2025, groundbreaking research I co-authored was published by Tenable, uncovering seven critical vulnerabilities in ChatGPT. Then a security researcher at...
On April 25, 2026, I reported a CSRF bypass in GitLab to their HackerOne program. Details: Vulnerability: GraphQL Channel CSRF Bypass Target: GitLab (GraphqlChannel WebSocket at /-/cable) S...
On April 20, 2026, I reported a Self-Hosted Runner RCE vulnerability in the cross-platform mobile framework of a leading tech company. Details: Vulnerability: Remote Code Execution on Self-Host...
On March 6, 2026, I discovered a PWN Request vulnerability in SAP/architecture-center, the repository behind SAP’s public Architecture Center website. Details: Vulnerability: PWN Request, leadi...
On March 4, 2026, I discovered a PWN Request vulnerability in rancher/elemental-toolkit. Details: Vulnerability: Pull Request Code Execution (untrusted pull_request_target checkout) Target: r...
On March 3, 2026, I discovered a PWN Request vulnerability in canonical/chisel. Details: Vulnerability: Pull Request Code Execution Target: canonical/chisel (Ubuntu’s file system slicing tool...
On March 3, 2026, I discovered a Self-Hosted Runner RCE vulnerability in an open-source systems framework of a leading social media company. Details: Vulnerability: Remote Code Execution on Sel...
On February 24, 2026, I discovered a PWN Request vulnerability in the GPU ML inference engine repository of a leading chip company. Details: Vulnerability: PWN Request — untrusted pull-request ...
On February 12, 2026, I discovered a PWN Request vulnerability in Salesforce Mobile SDK for iOS. Details: Vulnerability: PWN Request Target: forcedotcom/SalesforceMobileSDK-iOS Status: Patc...