skip to content
LG_

Léo Grambert

Software Developer

France

Software Developer with 8 years of experience. Currently exploring cybersecurity through vulnerability research, CTF competitions, and open-source security tools.

01 // Project_Registry

Open-source security tools, vulnerability research, and software engineering projects.

Loading contributions...

Less
More

02 // CVE_Discoveries

Vulnerabilities identified through independent security research and responsible disclosure.

CVE-2026-32255
Published: MAR_19_2026
High_8.6

Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly to fetch() server-side, and returns the full response body. An unauthenticated attacker can use this to make HTTP requests from the server to internal services, cloud metadata endpoints, or private network resources. This issue has been fixed in version 0.5.5. To workaround this issue, block or restrict access to /api/download/attatchment at the reverse proxy level (nginx, Cloudflare, etc.).

github.com github.com github.com

03 // Proof_of_Concepts

Published exploit proof-of-concept repositories.

CVE-2026-32255

This repository contains a proof of concept (POC) for CVE-2026-32255, a high-severity Server-Side Request Forgery (SSRF) vulnerability in Kan, an open-source project management tool.

2
CVE-2025-55182

This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.

12 3 forks
CVE-2025-29927

This repository contains a POC and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware.

6 3 forks

04 // OSS_Contributions

Open source projects I've contributed to.

42.5k
usebruno/ bruno

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

JavaScript MIT 2.3k
6.8k
infoslack/ awesome-web-hacking

A list of web application security

MIT 1.3k
4.6k
kanbn/ kan

The open source Trello alternative.

TypeScript AGPL-3.0 301
1.3k
OWASP/ www-community

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

HTML 824
84
OWASP/ www-project-vulnerable-web-applications-directory

The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

HTML CC-BY-SA-4.0 45

05 // Publications

Articles, writeups, TryHackMe rooms, and content published elsewhere.

MCP Tool Poisoning

MCP Tool Poisoning is an indirect prompt injection attack targeting AI agents that connect to external tool servers via the Model Context Protocol (MCP).

Article OWASP 2026-03-26

06 // Technical_Stack

Programming Languages

JavaScript TypeScript Python PHP Ruby

Web Frameworks

React Next.js Node.js FastAPI Ruby on Rails Symfony Hapi.js

Security

Vulnerability Research CVE Analysis CTF Challenges Web Application Security

DevOps & Tools

Git CI/CD Docker Linux Shell Scripting

07 // Certificate_Archive

Training courses and online certifications.

118 certificates indexed