Skip to content
View kai63001's full-sized avatar
🟦
𝐰𝐚𝐭𝐜𝐡𝐢𝐧𝐠 𝐭𝐡𝐞 𝐰𝐨𝐫𝐥𝐝 𝐠𝐨 𝐪𝐮𝐢𝐞𝐭.
🟦
𝐰𝐚𝐭𝐜𝐡𝐢𝐧𝐠 𝐭𝐡𝐞 𝐰𝐨𝐫𝐥𝐝 𝐠𝐨 𝐪𝐮𝐢𝐞𝐭.
32 followers · 11 following

Achievements

Achievement: Pair Extraordinairex4Achievement: Pull Sharkx4Achievement: Galaxy BrainAchievement: QuickdrawAchievement: StarstruckAchievement: YOLOAchievement: Public Sponsor

Achievements

Achievement: Pair Extraordinairex4Achievement: Pull Sharkx4Achievement: Galaxy BrainAchievement: QuickdrawAchievement: StarstruckAchievement: YOLOAchievement: Public Sponsor

Highlights

  • Pro

Block or report kai63001

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kai63001/README.md
Supanat Konprom. Product engineer and security researcher. 20 published CVEs.

I ship native, mobile, and web products, and I take apart other people's.

korsund.com · X · App Store · Google Play

Security research

CVE Product Issue CVSS
CVE-2026-7458 User Verification Authentication bypass 9.8
CVE-2026-57739 AcyMailing Blind SQL injection 9.3
CVE-2026-42747 Easy Form Builder Blind SQL injection 9.3
CVE-2026-7465 Spectra Gutenberg Blocks Remote code execution 8.8
CVE-2026-45490 Microsoft .NET SDK Elevation of privilege 7.8
CVE-2026-62871 Microsoft .NET WPF Heap overflow, elevation of privilege 7.8
CVE-2026-62886 Microsoft .NET Desktop Runtime Integer overflow, elevation of privilege 7.8
CVE-2026-91811 Foxit PDF Reader Out-of-bounds write, code execution 7.8
12 more
CVE Product Issue CVSS
CVE-2026-48874 GamiPress SQL injection 8.5
CVE-2026-3453 ProfilePress Subscription IDOR 8.1
CVE-2026-3629 Import and export users Privilege escalation 8.1
CVE-2026-49112 Shared Files Path traversal 7.5
CVE-2026-3454 GenerateBlocks Sensitive data exposure 6.5
CVE-2026-48965 XCloner Sensitive data exposure 6.5
CVE-2026-3722 Auto Image Attributes Stored XSS 6.4
CVE-2026-3361 WP Store Locator Stored XSS 6.4
CVE-2026-3369 Better Find and Replace Stored XSS 5.4
CVE-2026-4664 Customer Reviews for WooCommerce Authentication bypass 5.3
CVE-2026-91788 Foxit PDF Reader Information disclosure 4.7
CVE-2026-69904 Microsoft SharePoint SSRF, information disclosure 3.5

More in coordinated disclosure.

Shipped

Korva: offline Microsoft Publisher alternative
Trade Buddy: trading journal with AI coaching

Stack

Rust · Swift · Flutter · TypeScript · Go

Pinned Loading

  1. wildcard-game wildcard-game Public

    Wild game is NFT Card Game online make with godot or unity, dapp web3 (react,next js) marketplace (sell and buy NFT) and mint (create) NFT upload to IPFS

    C# 114 47

  2. unclelife unclelife Public

    Building UncleLife.co: A Deep Dive into Next.js, Supabase, and the Power of Notion Integration

    TypeScript

  3. focusify focusify Public

    Focusify.io is a productivity application designed to help you streamline your tasks, organize your notes, master the Pomodoro technique, and create a work environment that resonates with your pers…

    TypeScript 3

  4. peakpicks peakpicks Public

    AI-generated content engine with affiliate monetisation Rust (Actix + SurrealDB) · Next.js frontend

    TypeScript

  5. SummarizeIt SummarizeIt Public

    Instant text, video & audio summaries on iOS Flutter client · Python (llmlingua) & Node.js (Whisper) services · MongoDB · RevenueCat IAP

    Dart 2

  6. pgvector/pgvector-node pgvector/pgvector-node Public

    pgvector support for Node.js, Deno, and Bun (and TypeScript)

    JavaScript 445 24