{"vulnerability": "CVE-2023-3067", "sightings": [{"uuid": "349b920d-a82c-4414-a326-b445946e3138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3067\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:46:14.208Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6\n2. https://github.com/zadam/trilium/commit/4c3fcc3ea6f37debcb87ac1a7f5698c27be0e67b", "creation_timestamp": "2025-01-08T20:14:34.000000Z"}, {"uuid": "6cf8cfd0-8b52-4515-8597-12f3c4dbd59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30677", "type": "seen", "source": "https://t.me/cibsecurity/66050", "content": "\u203c CVE-2023-30677 \u203c\n\nImproper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:28.000000Z"}, {"uuid": "338ed8d4-3cd3-4b2a-b842-fb25c39a3397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30679", "type": "seen", "source": "https://t.me/cibsecurity/68150", "content": "\u203c CVE-2023-30679 \u203c\n\nImproper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T22:02:49.000000Z"}, {"uuid": "fba6059d-39f6-406b-a4b5-c9e1fc96a8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30678", "type": "seen", "source": "https://t.me/cibsecurity/66053", "content": "\u203c CVE-2023-30678 \u203c\n\nPotential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:30.000000Z"}, {"uuid": "e7b5859b-c783-4e9e-9de2-5bc14e219e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30670", "type": "seen", "source": "https://t.me/cibsecurity/66030", "content": "\u203c CVE-2023-30670 \u203c\n\nOut-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:23.000000Z"}, {"uuid": "ecda2161-c3f7-44e0-b2d6-09c5dc53d2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30673", "type": "seen", "source": "https://t.me/cibsecurity/66039", "content": "\u203c CVE-2023-30673 \u203c\n\nImproper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:34.000000Z"}, {"uuid": "6748de82-bf17-48ea-be4b-34a545fed8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30674", "type": "seen", "source": "https://t.me/cibsecurity/66051", "content": "\u203c CVE-2023-30674 \u203c\n\nImproper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:29.000000Z"}, {"uuid": "4792b441-4052-4afe-b062-bacfcb4f57b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/cibsecurity/64917", "content": "\u203c CVE-2023-3067 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:31.000000Z"}, {"uuid": "fe504137-16a0-4ed2-989c-73ced9251f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://gist.github.com/Raiders0786/13386ce9b5d01281a91b90d60e1225b3", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nEmail: chiragkcv2020@gmail.com\n\n**Public CVEs:** CVE-2022-4722, CVE-2023-3067\n\n**Public Good Projects:**\n- https://digibastion.com\n- https://web3sec.news\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- GitHub Security Portfolio: https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md\n- X / Research Updates: https://x.com/__Raiders\n- Telegram: https://t.me/raiders0786\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. More on the model: https://www.synack.com/why-synack/\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing\n- https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing\n- https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing\n- https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **OSWAR**: https://oswar.org\n- Author \u2014 *Domain & DNS Security Framework* (SEAL Alliance): https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security\n- EthSecurity DAO Badge Holder: https://x.com/__Raiders/status/2043883600152801651\n- SEAL announcement: https://x.com/_SEAL_Org/status/2021222150057693478\n- Ethereum ecosystem operational security project (grant supported): https://x.com/__Raiders/status/1952779461331460240\n- Octant Grant \u2014 Top 30 Ethereum Security Content Creators (~$10k): https://x.com/__Raiders/status/1981273644707029437\n\n**Featured in BlockThreat Newsletter:**\n- https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss\n- https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- https://aadapt.mitre.org/techniques/ADT1195/\n- https://aadapt.mitre.org/techniques/ADT1195.001\n\n**Public CVEs Discovered:**\n- Windows Thick Client Application: https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6\n- Backup Management Software Web Interface: https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58\n\n**Articles & Disclosed Findings:** https://medium.com/@chirag-agrawal\n**Example Pre-Audit Report:** https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- Example collaboration with Cyfrin for a large TradFi crypto company: https://x.com/__Raiders/status/1968997526050066827\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- Certified LLM Security Professional: https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:44:28.939011Z"}, {"uuid": "c038c536-8608-476e-abda-39ea2b81b1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://gist.github.com/Raiders0786/d98e8c077332c60d17c99e7cc1b5a424", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nTelegram: [t.me/Raiders0786](https://t.me/Raiders0786)\n\n**Public CVEs:** [CVE-2022-4722](https://nvd.nist.gov/vuln/detail/CVE-2022-4722), [CVE-2023-3067](https://nvd.nist.gov/vuln/detail/CVE-2023-3067)\n\n**Public Good Projects:**\n- [digibastion.com](https://digibastion.com)\n- [web3sec.news](https://web3sec.news)\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- [GitHub Security Portfolio](https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md)\n- [X / Research Updates](https://x.com/__Raiders)\n- [Telegram](https://t.me/raiders0786)\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. [More on the model](https://www.synack.com/why-synack/).\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- [Report 1](https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing)\n- [Report 2](https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing)\n- [Report 3](https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing)\n- [Report 4](https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing)\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf)\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf)\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): [report](https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf)\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **[OSWAR](https://oswar.org)**\n- Author \u2014 [*Domain & DNS Security Framework*](https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security) (SEAL Alliance)\n- [EthSecurity DAO Badge Holder](https://x.com/__Raiders/status/2043883600152801651)\n- [SEAL announcement](https://x.com/_SEAL_Org/status/2021222150057693478)\n- [Ethereum ecosystem operational security project](https://x.com/__Raiders/status/1952779461331460240) (grant supported)\n- [Octant Grant \u2014 Top 30 Ethereum Security Content Creators](https://x.com/__Raiders/status/1981273644707029437) (~$10k)\n\n**Featured in BlockThreat Newsletter:**\n- [How Multi-Agent AI Is Catching the 80% of Hacks That Audits Miss](https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [DNS Security in Web3: Attacks & Monitoring Setup](https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup)\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- [ADT1195](https://aadapt.mitre.org/techniques/ADT1195/)\n- [ADT1195.001](https://aadapt.mitre.org/techniques/ADT1195.001)\n\n**Public CVEs Discovered:**\n- [Windows Thick Client Application](https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6)\n- [Backup Management Software Web Interface](https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58)\n\n**Articles & Disclosed Findings:** [medium.com/@chirag-agrawal](https://medium.com/@chirag-agrawal)\n**Example Pre-Audit Report:** [hackmd.io](https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A)\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- [Example collaboration with Cyfrin for a large TradFi crypto company](https://x.com/__Raiders/status/1968997526050066827)\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- [Certified LLM Security Professional](https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe)\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:47:12.364772Z"}, {"uuid": "c080670d-63ca-418e-b5dd-9a790dc65ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-01T20:00:47.878217Z"}, {"uuid": "0364faea-7856-4572-bcf6-09bb0bb838f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-02T01:01:09.184577Z"}, {"uuid": "975bb153-3fde-4b3b-9d5d-c0d1d749d88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-04T04:00:05.711856Z"}, {"uuid": "447ee8c2-f88e-45e2-821f-ce04d904eb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-05T01:00:41.201779Z"}]}