CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.
Don't take documents at face value — detect parser differential attacks in XLSX, PDF, and DOCX
Differential benches that feed byte-identical HTTP input to several independent cookie and multipart parsers and show what each one understood
Pre-registered pilot: do JSON/JWT parsers on both sides of an authorization decision read the same token differently?
Validated but not canonical: how URL, e-mail and hostname validators in seven ecosystems handle invisible characters, confusables and IDNA edge cases
CHIMERA is a scientific reasoning engine for offensive security. It constructs falsifiable hypotheses about software systems, actively gathers evidence through controlled execution, updates beliefs using structured reasoning, and produces defensible security findings.
Canonically Yours — signing one package, publishing another. Intigriti 0726 write-up. Cross-namespace read via JSON duplicate-key parser differential (Intigriti July 2026)
Browser demo: real Ed25519 signatures over JSON — showing that a signature binds an exact byte string, never the meaning a parser recovers from it.
To associate your repository with the parser-differential topic, visit your repo's landing page and select "manage topics."