harkenzo

Security researcher focused on desktop application security, password managers, and credential storage tools.

Recent Advisories

• CVE-2023-52252: Unified Remote Web Triggerable RCE - Remote code execution in Unified Remote server via crafted web requests
• CVE-2023-36266: Keeper Password Dumping - Custom field values visible in cleartext in Keeper Desktop

Research

• Password Manager DLL Security - Analysis of DLL loading behavior across major password managers
• Electron App Attack Surface - Common security issues in Electron-based desktop applications

Contact

For responsible disclosure coordination: harkenzo at tlstickle.com