/research
Security researchVulnerabilities we found in real systems, written up the way we write findings for clients. Only work that has been fully disclosed appears here.
Cross-Site Request Forgery (CSRF)OpenAI Discord VerificationOct 20268 min read
A CSRF vulnerability in OpenAI's Discord verification service allowed the account-unlinking operation to be triggered through a state-changing GET request without adequate anti-CSRF protection. The issue was reported through Bugcrowd and marked P3, resolved and fixed, in the published research.
Insecure Direct Object Reference (IDOR) / BOLACoinDepoOct 20267 min read
This writeup documents an Insecure Direct Object Reference (IDOR) vulnerability identified during independent bug bounty research against CoinDepo. The issue allowed an authenticated user to retrieve another account's Know Your Customer (KYC) information by manipulating identifier fields in a profile API request. The finding demonstrated a broken object-level authorization control affecting sensitive personal information, including identity details and references to uploaded identification documents. The vulnerability was reported through HackenProof and publicly disclosed. This research highlights the importance of enforcing server-side authorization checks and deriving account ownership from the authenticated session rather than trusting client-controlled request parameters.
Remote Code Execution · UnauthenticatedIndependent researchSept 20263 min read
An unauthenticated remote code execution vulnerability was identified in Langflow's /api/v1/validate/code endpoint, where attacker-controlled Python code could be executed on the underlying server during code validation. Tracked as CVE-2025-3248, the vulnerability can allow an unauthenticated remote user to execute operating-system commands with the privileges of the Langflow process.
A 30 minute scoping call, then a fixed price. No discovery questionnaire, no pressure to buy.
No form, no sales desk. The person who answers is the person who would run your engagement.