Research
CVE-2026-0603: Second-Order SQL Injection in Hibernate ORM
A flaw I found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used.
CVE-2025-8083 - Prototype Pollution in Vuetify
Back in July of 2025 I found an interesting vulnerability in Vuetify's Preset configuration. In this article I give a technical overview of this bug, following the style of my original report.
CVE-2023-3118 - Reflected Cross-Site Scripting Vulnerability in Export All URLs WordPress Plugin
The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVE-2022-2593 - SQL Injection Vulnerability in Better Search Replace WordPress Plugin
The plugin Better Search Replace does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
YouGina
Software engineer and security researcher. I write about bug bounty hunting, application security, and the craft of building software that is harder to break.
Get in touch
@yougina
For research questions, disclosure conversations, or a second opinion on something you are working through.