methodology 4
- OpenConnect Fortinet: server-induced chosen-offset stack write via snprintf-return-value cursor arithmetic
- Case-variant path aliases in Rust denial gates: anatomy of a canonicalize-fallback bypass
- One byte of URL-encoding past a WAF: notes on CVE-2026-40050 and the GraphQL endpoint nobody fenced
- Found the same Linux iSCSI CHAP base64 overflow 25 days early — and what 'review-ready' really means