← Leaderboard
#20 · 90 days#19 · all time

@n0ctis

🇪🇬member since 30 Aug 2023·Web · File upload
Reputation
5,880
Signal
5.7
avg severity of valid reports
Impact
20.9
bounty-weighted
Earned, 90d
$12.5k
Earned, all time
$101k
Valid reports
97
1-week streak
Disclosed reports · 2
$26k shown
  • criticalPGN-10361

    Duplicate: SAML assertion wrapping on connect broker

    Duplicate of a report submitted 2026-09-19T22:04Z. The reporter received signal credit and the original timestamp was shown at triage.

    LedgerlineImproper Verification of Cryptographic Signature20 Sept 2026triage 4.5h
    —
    Duplicate
  • criticalPGN-10324

    Symlink inside workspace import archive reads server configuration

    The import worker extracted archives with symlinks intact. The proof read the worker's own environment file and nothing else.

    QuillnoteImproper Link Resolution Before File Access08 Sept 2026triage 13hresolved 7.8d
    $26,000
    Resolved
Portable record

Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.

pgn record export @n0ctis --sign