Public Security Research

A selection of published vulnerability research, coordinated disclosures, and industry recognition.

2026

• PAPPL multipart length underflow - Unauthenticated out-of-bounds read and remote denial of service

• HAPROXY - Peer serializer oversized-key heap overwrite

• HAPROXY - Buffer overflow when filling fake cek in case of RSA1.5

• Axigen Server Denial of Service Vulnerability via Nested SOAP / JSON Requests (CVE-2026-119762)- unauthenticated remote attacker to crash the Axigen server process with a single small request

• Prysm wrong-fork StatusV2 state poisoning (Ethereum client) - a rejected wrong-fork StatusV2 peer status overwrites the stored chain state, and the attacker-controlled finalized epoch panics the node during startup initial sync and later resync

• Other disclosures confirmed and pending……

2019

• Bytecoin JSON-RPC stack overflow
  Also affected many CryptoNight-based blockchains

2018

• Microsoft Top 100 Security Researcher
  Recognised under the alias Dmitri Kaslov

• Microsoft Edge information disclosure — CVE-2018-0839

• Microsoft Edge CQuotes type confusion — CVE-2018-0763

• Foxit Reader U3D out-of-bounds read — CVE-2018-9980

• Foxit Reader U3D uninitialized pointer RCE — CVE-2018-9981

• Microsoft Access information disclosure — CVE-2018-0853

• Microsoft Edge Select element out-of-bounds read

2017

• Microsoft Excel XLS use-after-free RCE — CVE-2017-11884

• Internet Explorer information disclosure — CVE-2017-11790

• WPS Office Spreadsheet invalid pointer read — CVE-2017-12915

• WPS Office Spreadsheet out-of-bounds read — CVE-2017-12918

• WPS Office Writer out-of-bounds read — CVE-2017-12916

• Payara Server cross-site scripting vulnerability

• 21 vulnerabilities in Foxit Reader and PhantomPDF
  Research spanning 2016–2017

2016

• Microsoft Office denial of service — CVE-2016-7244

• Adobe security vulnerability — CVE-2016-7012

• GNOME Eye of GNOME out-of-bounds write — CVE-2016-6855