Skip to content
View thesmartshadow's full-sized avatar
🎯
Focusing
🎯
Focusing
4 followers · 15 following

Achievements

Achievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Achievements

Achievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Highlights

Block or report thesmartshadow

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
thesmartshadow/README.md

Security Researcher

HackerOne: https://hackerone.com/thesmartshadow

🧠 About

I’m Ali Firas (thesmartshadow) - a Security Researcher specializing in source-code auditing, vulnerability discovery, and responsible disclosure.

I focus on shipping complete security outcomes:

  • Clear, evidence-based reports
  • Minimal, reproducible PoCs
  • PR fixes + regression tests
  • Advisory publication + ecosystem indexing

🏅 Research Badges

🧩 CVE Portfolio (NVD + Multi-Database Coverage)

CVE NVD Cross-Database IDs
CVE-2025-63095 NVD EUVD-2025-199991 • CNNVD-202512-067 • PT-2025-48451
CVE-2025-59717 NVD EUVD-2025-30235 • CNNVD-202509-3044 • PT-2025-38507
CVE-2025-59716 NVD EUVD-2025-37881 • CNNVD-202511-387 • PT-2025-45141
CVE-2025-67125 NVD EUVD-2026-4308 • DEBIAN-CVE-2025-67125 • UBUNTU-CVE-2025-67125 • PT-2026-4472 • CNNVD-202601-4006
CVE-2025-67124 NVD EUVD-2026-4261 • PT-2026-4471 • CNNVD-202601-4008
CVE-2025-13437 NVD EUVD-2025-198297 • CNNVD-202511-2323 • PT-2025-47601
CVE-2026-25500 NVD DEBIAN-CVE-2026-25500 • UBUNTU-CVE-2026-25500 • USN-8066-1 • PT-2026-20325 • CNNVD-202602-2768

🗺️ CVE Impact Map (Ecosystem Coverage)

flowchart LR
  A["Ali Firas (thesmartshadow)"] --> B["CVEs x7"]

  B --> N["NVD"]
  B --> G["GHSA"]
  B --> E["EUVD"]
  B --> C["CNNVD"]
  B --> P["PT Bulletins"]
  B --> D["Debian Security Tracker"]
  B --> U["Ubuntu Security"]
  B --> S["USN"]

  D --> L["Linux Ecosystem Impact"]
  U --> L
  S --> L
Loading

📊 Security Metrics (Stable Cards)

📈 GitHub Activity Graph

🔗 Connect

codepen devto twitter stackoverflow codesandbox instagram hashnode medium codechef hackerrank leetcode topcoder

🧰 Core stack (security-first)

linux git python go rust c cplusplus docker nodejs

🧪 Security tooling

📫 Contact

Pinned Loading

  1. ai ai Public

    Forked from vercel/ai

    The AI Toolkit for TypeScript. From the creators of Next.js, the AI SDK is a free open-source library for building AI-powered applications and agents

    TypeScript

  2. docsy docsy Public

    Forked from google/docsy

    Hugo theme for open source documentation

    JavaScript

  3. expr expr Public

    Forked from expr-lang/expr

    Expression language and expression evaluation for Go

    Go

  4. freertos-sys2 freertos-sys2 Public

    Forked from junelife/freertos-sys2

    Rust

  5. humanio humanio Public

    Forked from google/humanio

    Human I/O, published at CHI 2024, Honorable Mentions Award

    JavaScript

  6. rack rack Public

    Forked from rack/rack

    A modular Ruby web server interface.

    Ruby