▄ ▄ ▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄▄ ▄▄▄▄▄▄ ▄ ▄ ▄ ▄▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ▄▄▄▄
█ ▄▀ ██ █ █ ▀█ █ █ █ ██ ██ ▄▀ ▀▄ █▀ ▀ █ █▀ ▀
█▄█ █ █ █ █▄▄▄▄▀ █ █▄▄▄▄▄ █ █ ██ █ █ █ ▀█▄▄▄ █▄▄▄▄▄ ▀█▄▄▄
█ █▄ █▄▄█ █ █ ▀▄ █ █ █ █ ▀▀ █ █ █ ▀█ █ ▀█
█ ▀▄ █ █ █ █ ▀ ▄▄█▄▄ █▄▄▄▄▄ █▄▄▄▄▄ █ █ █▄▄█ ▀▄▄▄█▀ █▄▄▄▄▄ ▀▄▄▄█▀
Role: Principal Security Engineer
Focus: OSS Audits / CVE Disclosure
Method: Manual review -> private report -> patch
As the Principal Security Engineer for India's leading enterprise networking stack, I architect robust defense systems and lead comprehensive security initiatives.
In my independent research, I focus on identifying critical vulnerabilities within widely adopted open-source ecosystems.
My methodology is meticulous: conduct deep-dive manual analysis, securely report findings with actionable proofs-of-concept, and coordinate responsible disclosure to ensure the broader community remains secure.
In my independent research, I focus on identifying critical vulnerabilities within widely adopted open-source ecosystems.
My methodology is meticulous: conduct deep-dive manual analysis, securely report findings with actionable proofs-of-concept, and coordinate responsible disclosure to ensure the broader community remains secure.
| audited projects | CVEs filed | RCE chains | largest target |
|---|---|---|---|
| 18 | 45+ | 8 | 23k stars |
Self-hostable email OSINT platform for mapping exposure across 800+ platforms, breach sources, DNS records, and the open web. 
|
Dark web threat-intelligence platform with Tor search, entity extraction, relationship graphing, and STIX 2.1 / MISP / Sigma export. 
|
| project | advisory | severity | class |
|---|---|---|---|
| algernon | CVE-2026-43981 | High | Race condition, DoS via shared LState |
| algernon | CVE-2026-43982 | High | Path traversal file write via savein() |
| quark-auto-save | CVE-2026-45228 | Medium | Stored XSS via System Configuration |
| quark-auto-save | CVE-2026-45229 | High | Mass assignment, credential takeover |
| claude-hud | CVE-2026-47090 | Low | Terminal injection via OSC 8 hyperlinks |
| claude-hud | CVE-2026-47091 | Medium | Path traversal via transcript_path |
| claude-hud | CVE-2026-47092 | High | Arbitrary command execution via COMSPEC |
25+ more in pipeline. Published advisories live at github.com/KatrielMoses/cves.
free security audits for open-source projects
deliverables
├── full manual source-code audit
├── private report with working proof-of-concept
├── CVEs filed and advisories published after fixes are live
└── certificate confirming the project was reviewed and patched
condition
└── the project has to be open source
turnaround
└── one weekend, two at most
[ responsible disclosure ] [ fix first ] [ publish after ]