Acknowledged By:
Focused on web application security.
Highest severity finding to date.
Weak password reset logic allowed an attacker to take over any account via response manipulation without prior authentication. Reported, triaged, and resolved by the vendor.
Public acknowledgements from organizations that validated my reports.
Recognized by amsterdam.nl through the Informatiebeveiligingsdienst (IBD). Listed in the official 2026 Coordinated Vulnerability Disclosure Hall of Fame for responsible disclosure of 10 security vulnerabilities.
Formal acknowledgement letters from companies that received my reports.
Recognized by Founder & CEO Toni de la Fuente for finding a URL injection flaw in registration emails.
Recognized by Director Joris Satorius for disclosing a hyperlink injection vulnerability in the customer portal.
Recognized by Director of Sales & Marketing Anne Lazarakis for identifying error in documentation that improve the accuracy of resources for developers worldwide.
Recognized by Cybersecurity Consultant Baptiste Gaubert for contributions to the Pathé coordinated vulnerability disclosure program
Recognized by CEO Vadim Katcherovski and security team for responsibly disclosing several security issues.
Every report I've submitted, tracked by severity and status.
| Vulnerability | Severity | Status | Reported |
|---|
For disclosure coordination, collaboration, or security consultations.
