Hono · 2026
CVSS 4.7 Medium
Reported an XSS in hono/jsx server-side rendering, credited on CVE-2026-93981 and fixed in 4.13.7.
latest article
NOV 13, 2026
Phigros++: modding Phigros in three days, with replays a server re-judges
Phigros++ loads a Lua mod loader into Phigros through one added ELF dependency. It records every touch, and phigros.tools only ranks a replay once a bit-exact port of the game's judgement gets the same 8 numbers from it.
reverse-engineeringphigrosandroidlua
Read article ->
recent writing
view all posts -> SEP 27 2026 Squeezing 2.33 GiB of Phigros charts into 46 MB, losslessly compression JUN 07 2026 TBSO raised €8.0m to build an AI/fintech platform that doesn't exist yet finance MAY 10 2026 Why the fuck did I write a Rust crate? rust APR 29 2026 Mogador: 13 million files through one workstation scraping MAR 04 2026 Belfast: I quit a game by writing its server reverse-engineering
work & disclosures
view all disclosures ->Fédération Française d'Athlétisme · 2026
CVSS 5.9 Medium
Reported weak cryptographic practices and non-robust implementations.
libsoup · 2026
CVSS 6.9 Medium
Reported a memory corruption issue in the HTTP client/server library.
Iliad / Freebox OS · 2026
CVSS 8.7 High
Reported two vulnerabilities affecting Freebox OS, enabling one-click account takeover.
Santé Publique France · 2026
CVSS 8.7 High
Reported an IDOR exposing personally identifiable data for roughly 250 EUR in bounty.
pdfcpu · 2025
CVSS 8.2 High
Reported a stack overflow leading to denial of service.