bg0dSECURITY / IN PROGRESS

BILGUUN / BG0D — SECURITY RESEARCHER

Finding flaws.
Proving impact.
Helping fix them.

I’m a fourth-year cybersecurity student focused on offensive security, penetration testing, and vulnerability research. My work has led to six published CVEs in open-source software.

Explore my research Get in touch
SCROLL TO EXPLORERESEARCH BACKED BY PUBLIC ADVISORIES

01 / SECURITY RESEARCH

Findings with a
paper trail.

Six published CVEs credit bg0d-glitch as the reporter. Each finding links to its primary security advisory.

FILERISE / ACCESS CONTROL

Read-only access to file overwrite

A forged ONLYOFFICE save callback let a read-only user overwrite a file.

CVE-2026-33330 VIEW ADVISORY FRIGATE / INFORMATION DISCLOSURE

Unredacted configuration exposure

Non-admin users could retrieve raw configuration data, including secrets.

CVE-2026-33469 VIEW ADVISORY FILERISE / ACCESS CONTROL

Cross-user file content disclosure

The file snippet endpoint exposed another user’s content to a restricted account.

CVE-2026-33477 VIEW ADVISORY JQ / DENIAL OF SERVICE

Unbounded recursion in path operations

Deep path arrays could exhaust the stack and crash jq.

CVE-2026-33947 VIEW ADVISORY GUARDDOG / SSRF

Remote scan URL rewrite

A blind GitHub URL rewrite could trigger SSRF and expose a GitHub token.

CVE-2026-44971 VIEW ADVISORY GUARDDOG / OUTPUT HANDLING

Terminal escape injection

Malicious package content could inject terminal control sequences into scan output.

CVE-2026-44972 VIEW ADVISORY

02 / EXPERIENCE

Research beyond
the lab.

A mix of recognized vulnerability reporting and practical systems work.

GOOGLE VULNERABILITY REWARD PROGRAM

Accepted and rewarded.

My vulnerability report was accepted by Google’s Vulnerability Reward Program and received a bounty.

RESPONSIBLE DISCLOSURE / REWARDED
PRACTICAL FOUNDATION

Comfortable below the surface.

Hands-on experience with Linux, system administration, and IT infrastructure informs how I investigate security issues.

LINUX / SYSTEMS / INFRASTRUCTURE

03 / ABOUT

Curiosity, backed
by the work.

I’m Bilguun, a fourth-year Cyber Security student at the Mongolian University of Science and Technology’s School of Information and Communication Technology.

I’m developing in offensive security, penetration testing, and security research. My interests span application security, open-source software, CTFs, and the systems behind them. I’m a member of the Hackratic CTF team.

OFFENSIVE SECURITYPENETRATION TESTINGVULNERABILITY RESEARCH
GitHub Hack The Box Hackratic CTF Team

04 / CONTACT

Let’s work on
what matters.

Open to security research, penetration testing opportunities, and thoughtful collaboration.

Send an email