A list of security vulnerabilities discovered by me.
| Date | Advisory | Product / Project | Vulnerability | CVSS | Severity |
|---|---|---|---|---|---|
| 2026-08-05 | GHSA-23h9-rr79-r3gh | Rancher Manager | Cluster Existence Oracle / Information Disclosure | 5.3 | Medium |
| 2026-06-17 | Postfix 3.11.4 – Bug 3 | Postfix | SMTP Server Robustness Issue | N/A | N/A |
| 2026-05-27 | GHSA-mhc6-2gfq-xx62 | Rancher Manager | Command Injection | 9.6 | Critical |
| 2025-03-26 | GHSA-45f2-5q3r-xgg6 | ZITADEL | Unauthenticated Account Pre-Hijacking via Forged External Identity Provider Callback in Login V1 | N/A | Critical |
| 2025-03-26 | GHSA-738m-7888-jfv8 | ZITADEL | Unauthenticated Account Pre-Hijacking via Forged External Identity Provider Callback in Login V1 | N/A | N/A |
| 2020-07-29 | CVE-2020-4463 | IBM Maximo Asset Management | XML External Entity Injection (XXE) / Information Disclosure | 8.2 | High |
| 2020-03-12 | CVE-2019-17658 | FortiClient for Windows | Unquoted Service Path / Privilege Escalation | 9.8 | Critical |
| 2020-01-15 | CVE-2020-1611 | Juniper Junos Space | Local File Inclusion | 6.5 | Medium |