Juan Soberanes

The One

Mexican American Hacker.

Posts

• Finding a Heap Buffer Over-Read in ascii-view (CWE-125)
• Critical SQL Injection Vulnerability Discovered in HortusFox (pending CVE-2025-65298)
• CVE-2025-64115: Unvalidated Referer Redirect & SSRF in Movary
• Mining Github for CVEs!
• Blind SQL Injection in FireShare, Found in an API sort Parameter
• Stored XSS FOUND! In Many Notes, The Best Note Taking APP!
• Blind SQL Injection Found! In Tirreno : Security Analytics
• XSS Found in Asian Arts Talent Foundation
• OSCP Cheatsheet
• Offensive OSINT for Finding Software Vulnerabilities
• Ultimate Guide for Staying Anonymous