Writeups
Vulnerability writeups.
Root-cause analysis and proof of concept for vulnerabilities I discovered and disclosed responsibly. Every entry maps to a public record.
sec-moderate
CVE-2026-6765
Test-only FormAutofill handlers exposed in production
Four test-only message handlers shipped in Firefox let any compromised renderer read, inject, or delete saved autofill data.
Read writeup
stored xss
CVE-2026-39154
Stored XSS in CometChat group messages
A persistent JavaScript payload in group messages executes in the browser of every member who opens the conversation.
Read writeup