Skip to content
View izzysec's full-sized avatar
🔍
Hacking
🔍
Hacking
1 follower · 2 following

Achievements

Achievement: YOLOAchievement: Pull Shark

Achievements

Achievement: YOLOAchievement: Pull Shark

Highlights

Block or report izzysec

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
izzysec/README.md

Isabel Mill

Security Researcher at Check Point Research

Blog X LinkedIn

Offensive security researcher and full-stack developer.

CVEs

  • CVE-2026-105802 · Git LFS · High
    A line break in a submodule URL injects Git config that makes Git LFS run an attacker's program.
  • CVE-2026-95106 · Gitea · Critical
    Duplicate tree entries let reviewers see one file while checkout and CI run another.
  • CVE-2026-89011 · isomorphic-git · High
    A branch name starting with __proto__ pollutes JavaScript's shared prototype and routes later Git logins through an attacker's proxy.
  • CVE-2026-5917 · libgit2 · High
    An unquoted path in libgit2's SSH command lets a crafted Git URL run commands on the SSH server, as you.
  • CVE-2025-61260 · OpenAI Codex CLI · Critical
    Project-local config files make Codex CLI launch an attacker's command the moment you open it in a folder.

Full write-ups live on izzysec.github.io.

Projects

  • NullReport
    A self-hosted, AI-assisted penetration test report generator. Findings become a reusable library, reports export as branded DOCX, and client data never leaves your machine. Docs · GitHub

Certifications

  • ARTE, AWS Red Team Expert
  • eWPTX, Web Application Penetration Tester eXtreme

Contact

Email me at izzysecurity@gmail.com or DM me on X or LinkedIn.

Popular repositories Loading

  1. ai-offensive-code-review ai-offensive-code-review Public

    AI security review that maps attack surface and generates leads for humans to validate.

    Python 5 1

  2. izzysec izzysec Public

  3. izzysec.github.io izzysec.github.io Public

    CVE write-ups and security research by izzysec

    SCSS