Security Research

CVEs & Security Advisories

This is a record of vulnerabilities I discovered and reported through responsible disclosure. Each advisory goes beyond CVSS and CWE to explain the technical issue, why it matters and what the remediation means in practice.

14 entries

  1. CVE-2026-79363 Cloudron Stored XSS Medium
  2. Coming Soon — Icinga 2 Advisory in preparation —
  3. Coming Soon — VMware Advisory in preparation —
  4. CVE-2025-60917 OpenAtlas XSS Medium
  5. CVE-2025-60916 OpenAtlas XSS (DOM) Medium
  6. CVE-2025-60915 OpenAtlas LFI / Path Traversal Critical
  7. CVE-2025-60914 OpenAtlas Broken Access Control (IDOR) High
  8. CVE-2025-56423 OpenAtlas Information Disclosure Medium
  9. CVE-2025-51533 Sage DPW v8 Broken Access Control Medium
  10. CVE-2025-51532 Sage DPW v8 (OnPremise) Broken Access Control High
  11. CVE-2025-51531 Sage DPW v8 XSS Medium
  12. CVE-2025-51536 OpenAtlas Authentication / Default Credentials Critical
  13. CVE-2025-51535 OpenAtlas Dangerous Functionality / Misconfiguration Critical
  14. CVE-2025-51534 OpenAtlas XSS High

No advisories match these filters.