Sangharsha Upadhyaya (noob6t5)
Security researcher focused on AI/ML Red Teaming, vulnerability discovery, and AI safety research.
"Code is either a tool or a vulnerability, depending on who reads it first."
| Target / Vendor | Vulnerability Type | Reference / Impact |
|---|---|---|
| TechPSC | Access-Control Bypass , MASS PII Leak |
TechPSC Hall of Fame |
| Draw.io (jgraph/drawio) | Data exfiltration & Stored XSS | CVE-2026-46642 |
| SAP | Account Takeover (ATO) | Security Advisory |
| Substack | OAuth Account Takeover (ATO) | Substack Hall of Fame |
| University of Texas | Information Disclosure | UT Austin Security HoF |
| Huntr model | 2× Critical Vulnerabilities in Model Files | Responsible private disclosure |
- Temporal Weakening of KL-Regularized Safety Constraints (Part-1 Continued) — Formalization of the Temporal Exploitability Limit.
- Detectability Limits of Deceptive Optimization under KL-Regularized Behavioral Constraints (Part 1) — Research on deceptive alignment and detectability frontiers.
- Breaking Symmetry in Autonomous Defensive Swarms Under Adversarial Pressure — Simulation framework for swarm coordination and resilience.
- Semantic Retrieval Poisoning in Lightweight RAG Systems — Experimental analysis of retrieval poisoning and downstream instruction propagation in TinyLlama-based RAG pipelines under constrained environments.