VYN / RSRCHBeyond the hackbot: how AI-assisted vulnerability research works
Why heuristics, steering, evidence, and persistent memory matter more than raw volume when searching for real vulnerabilities.
Latest publications
View all articlesVYN / RSRCH
VYN / RSRCHInvisible Prompt Injection Chain Leading to Private Conversation Data Exfiltration
How invisible Unicode, a remote second stage, and external browsing can turn public content into an exfiltration channel.
VYN / RSRCHPrototype-Based Tool Allowlist Bypass in Vercel AI SDK MCP Client
How an inherited-property check allowed unapproved MCP tools to be exposed and executed.
Recent records
Open BuglistNext.js ISR cache path traversal bypasses Proxy and enables RCE on Windows
A mismatch between the authorized route and the path used by FileSystemCache exposed protected artifacts and, under specific conditions, allowed unauthenticated code execution.
Next.jsPath traversal9.0 / CriticalFixed
fetch(Request, init) cache-key confusion leaks POST responses across users
Next.js derived the cache identity from a different request than the one sent upstream.
Next.jsCache confusion6.0 / MediumFixed
Archive
VYN / RSRCHNext.js Vulnerability: Accessing Protected Static Routes in App Router via RSC Segment Artifacts
An internal build artifact in Next.js let attackers reach content protected by proxy/middleware without authentication (CVE-2026-44575).
VYN / RSRCHBypassing BODY_SIZE_LIMIT in SvelteKit adapter-node via chunked requests
How chunked requests without Content-Length bypassed the body size limit in SvelteKit's adapter-node (CVE-2026-40073).
VYN / RSRCHPrompt Injection in Bug Bounty: Vectors, Techniques, and Real-World Impact
A practical guide to indirect injection attacks and real-world impact.