Independent security research · Offensive engineering

I find the assumptions
software shouldn’t make.

Michael Holmquist is a security researcher focused on finding consequential flaws in web applications, AI/ML systems, ICS, and mission-critical platforms.

09Published CVEs

101Disclosures

100%Responsible disclosure

Scroll to examine findings ↓

Vulnerability research

Published findings only. Technical details are shared after coordinated disclosure.

Highlighted Projects

Tools and experiments built to make security research faster, deeper, and more repeatable.

Research philosophy

Break thoughtfully.
Report responsibly.

I approach vulnerability research as engineering: form a hypothesis, trace the trust boundary, prove impact, and leave maintainers with enough evidence to fix the root cause.

My current work explores agent-assisted source review, variant analysis, and attack-path-driven prioritization.

I find the assumptions
software shouldn’t make.

Vulnerability research

Heap buffer overflow via unvalidated CLIPRDR FileContentsResponse length

Broken access control information disclosure via Settings API

Integer overflow in convolutional layer buffer sizing leads to heap buffer overflow

Integer overflow in msgpack_unpacker_expand_buffer causes a false-success undersized reservation

Server-side request forgery via security.http.urls lacking destination address validation

Stored cross-site scripting via unescaped code-fence attribute values

Node permission model bypass via default TailwindCSS child-process grant

Deserialization of untrusted data via ClusteringModel.load

NULL pointer dereference in the Health & Safety application

Highlighted Projects

CCVR

KernelForge

Waypoint

RedForge

Zero Day Lab

SAIL

Sidecar

Sandbox

VBA

SRAR

ASM Research Pipeline

QR Trust

Break thoughtfully.
Report responsibly.

I find the assumptionssoftware shouldn’t make.

Vulnerability research

Heap buffer overflow via unvalidated CLIPRDR FileContentsResponse length

Broken access control information disclosure via Settings API

Integer overflow in convolutional layer buffer sizing leads to heap buffer overflow

Integer overflow in msgpack_unpacker_expand_buffer causes a false-success undersized reservation

Server-side request forgery via security.http.urls lacking destination address validation

Stored cross-site scripting via unescaped code-fence attribute values

Node permission model bypass via default TailwindCSS child-process grant

Deserialization of untrusted data via ClusteringModel.load

NULL pointer dereference in the Health & Safety application

Highlighted Projects

CCVR

KernelForge

Waypoint

RedForge

Zero Day Lab

SAIL

Sidecar

Sandbox

VBA

SRAR

ASM Research Pipeline

QR Trust

Break thoughtfully.Report responsibly.

I find the assumptions
software shouldn’t make.

Break thoughtfully.
Report responsibly.