home.
about.
Hi, I'm Jacky, a cybersecurity major at York University. Recently, I've been into vulnerability research, web exploitation, and AI security. I'm currently working on independent zero-day research, and in my free time, I play CTFs and occasionally doomscroll.
experience.
Software Engineer Intern
CTF Player
Game Developer
recent writing.
all postssecurity research.
details- CVE-2026-25057 MarkUs · Arbitrary server file write
- CVE-2026-28405 MarkUs · Stored cross-site scripting (XSS)
- CVE-2026-8037 LoadMaster · Remote code execution (RCE)
- CVE-2026-24900 MarkUs · Unauthorized submission access
- CVE-2026-25962 MarkUs · ZIP bomb denial of service
- CVE-2026-27807 MarkUs · YAML expansion denial of service