Vulnerability Research & CVE Reports

This is a directory listing containing links to my own independent security research projects, including blog posts, reverse engineering antics, and formally filed CVE reports.

• The File That Changed Its Mind: A Pictshare TOCTOU Bug

• Sending opentrashmail to the Trash

• DMARC'd for Death: Anonymous Stored XSS for Email Admins

• WebObjects Arbitrary HTTP Header Injection & URL Reflection Cross-site Scripting