Found Vulnerabilities

Security research and bug bounty findings.

Security Research Articles

Hacking via eSCL protocol - Article on the eSCL protocol and its security implications.

Vulnerabilities

The table below lists vulnerabilities that were found in my free time and reported as part of the bug bounty or vulnerability disclosure program. All have been addressed and resolved by the respective teams.

buganizer/492744328 - OOB read in Chrome - Image processing
buganizer/492209815 - OOB write in Chrome - Font rendering
CVE-2026-8558 - OOB write in Chrome - Font rendering
CVE-2026-41148 - CSS injection in MermaidJS
CVE-2026-4699 - OOB write in Firefox - Font rendering
CVE-2025-12097 - LFI in NI System Web Server

Misc

Date	Name	Org	Info
2026-02	Stack Overflow in FreeType	FreeType	Issue
2026-02	Signed int overflow in dr_libs MS-ADPCM decoder	dr_libs	Issue
2026-02	Denial of Service via Cookie Bombing	seznam.cz	Seznam HoF
2026-01	Open Redirect	seznam.cz	Bounty reward
2026-01	ReDoS	NodeBB	Bounty reward
2025-12	rXSS to partial account takeover	undisclosed	Bounty reward
2025-12	sXSS (Old browsers only)	seznam.cz	Seznam HoF
2025-12	rXSS	hrad.cz
2025-11	CVE-2025-12097	Many big universities	Utwente HoF