Work & Research
Security advisories, press coverage, certifications, and community contributions.
Security Advisories & CVEs
MISP — SQL Injection via Unvalidated Ordering Parameters
SQL injection in event and shadow attribute listings
GCVE-1-2026-0031MISP — Improper Access Control in Auth Key Reset
Privilege escalation to site administrator
GCVE-1-2026-0030LookyLoo — PlaywrightCapture Local File Access
Permits access to local files and internal network resources during page capture
GCVE-1-2026-0028bestpractical/RT — Privilege Escalation via REST 2.0
Privilege escalation and information disclosure via user collection endpoint
CVE-2026-44231AIL Framework — Stored XSS in Modal Item Preview
Stored XSS in modal item preview for long item content
CVE-2026-39416 / GCVE-1-2026-0023Visual Studio Code — Information Disclosure
Exposure of sensitive information to an unauthorized actor over a network
CVE-2026-47284OpenProject.org — Cross-Project Meeting Agenda Injection
Meeting agenda item injection via unscoped section lookup
CVE-2026-40896OpenCTI — No Rate Limiting on Authentication Endpoint
Missing rate limiting on the token GraphQL mutation allows unauthenticated credential brute-forcing
GHSA-74jw-q47r-q5pvMetabase — Dashboard Update Response Leaks Card Details
Authenticated user can retrieve full card details from restricted collections via PUT response
GHSA-58qx-j9c7-4rq7PostgreSQL — pg_restore_attribute_stats Array Overflow
Accepts values that cause query planning to read past end of stats array
CVE-2026-6575MISP — Stored XSS in Link-Type Attributes
XSS via link-type attributes in MISP events
MISP v2.5.36Press & Recognition
Featured by Spamhaus as Top Threat Intel Contributor
Profiled as a top contributor to the Spamhaus Threat Intel Community Portal for ongoing threat hunting work.
Reporting Malicious Sites: Taking Down 60,000
Guest blog post detailing how I used automated reporting and Abusix's Abuse Contact Database to take down 60,000+ malicious sites globally.
Xplorer Award Winner — Young Talent in Action
Profiled as one of five Xplorer Award winners for founding JustGuard, a platform that detects and neutralizes phishing campaigns.
L'appétit international des jeunes entrepreneurs
Featured in the Belgian business magazine Trends/Levif covering young entrepreneurs with international ambitions.
Training & Events
TryHackMe — SOC Level 1 Certificate
Completed the SOC Level 1 learning path covering security operations, log analysis, and incident response.
Cybersecurity Challenge Belgium — Finalist
6th place finish in the national Cybersecurity Challenge Belgium competition.
Selected for the pilot edition of ESA's cybersecurity training program at the ESA Academy.
BEST Soft Skills Track 2023
Completed the BEST Leuven soft skills track covering interview preparation, diversity & inclusion, and more.
Completed the comprehensive practical ethical hacking course.
Euroscola — European Parliament Student Representative
Represented Belgium in discussions about European challenges with students from across the EU in Strasbourg.