Research / Evidence / Understanding

The research library.

Read a disclosure, study the source, and trace the ideas across a growing collection of public security research.

66disclosures 126learning resources 13visual models 1,164program pages

Disclosures ↗Reading room ↗Visual library ↗Program atlas ↗JSON & schemas ↗

Choose a subject

Research by subject

Authorization and tenant boundaries34 reports · 83 referencesVulnerability family Authentication and identity16 reports · 44 referencesVulnerability family Business logic and concurrency14 reports · 34 referencesVulnerability family Cloud permissions and isolation15 reports · 9 referencesSecurity theme Software supply-chain security6 reports · 4 referencesSecurity theme Injection and untrusted input12 reports · 8 referencesVulnerability family AI integration boundaries7 reports · 12 referencesSecurity theme Client and browser security20 reports · 4 referencesSecurity theme Server-side request trust1 reports · 1 referencesVulnerability family Memory safety and parser contracts10 reports · 2 referencesVulnerability family Information exposure and response privacy4 reports · 4 referencesVulnerability family

Disclosures

Public disclosures

All reports

Google AZAuthorization and tenant boundaries

Google Mamba temporary outputs lacked access isolation

Mamba received a distinct USD 37,604.40 award. The case illustrates why temporary processing output needs explicit access isolation, with retrieval dependencies kept separate from standalone impact.

USD 37,604.40reported awardRead

Google AZAuthorization and tenant boundaries

Google Firefly confused worker authority and storage boundaries

Firefly received a separately identified USD 60,000 award. The case illustrates how delegated worker authority and storage permissions can diverge from caller authorization.

USD 60,000reported awardRead

Google BRClient and browser security

Chrome graphics input validation weakened an isolation boundary

One Chrome graphics report earned USD 250,000 across two award decisions.

USD 250,000reported awardRead

OpenAI AIAI integration boundaries

Codex metadata collection trusted repository execution helpers

ZDI awarded Doyensec USD 10,000 for this distinct Pwn2Own Berlin entry.

USD 10,000competition awardRead

OpenAI AIAI integration boundaries

Codex automated Git operations trusted repository hook settings

ZDI awarded Summoning Team USD 20,000 for this distinct Pwn2Own Berlin entry.

USD 20,000competition awardRead

OpenAI INInjection and untrusted input

Codex command approval relied on inconsistent parser semantics

ZDI awarded Compass Security USD 40,000 for this distinct Pwn2Own Berlin entry.

USD 40,000competition awardRead

Visual library

Visual models

All diagrams

A limited recovery request creates an account-bound challenge. Only valid, unexpired, unused proof permits a reset. Failure preserves account state; success consumes the challenge and notifies the owner.

Conceptual model Diagram

Recovery must preserve account ownership

Editorial conceptual model derived from the linked cases and official guidance; not a vendor architecture diagram or an exploitation sequence.

Reviewed 2026-10-02Read

User intent and untrusted connector content enter the AI workflow separately. A proposed action reaches an independent policy decision. Only an authorized state change proceeds; otherwise state remains unchanged.

Conceptual model Diagram

Retrieved content is data, not authority

Editorial conceptual model derived from the linked cases and official guidance; not a vendor architecture diagram or an exploitation sequence.

Reviewed 2026-10-02Read

Reviewed content and its immutable version are bound to an approval. Execution independently checks that the version still matches. Matching requests proceed with least privilege; mismatches require a new review.

Conceptual model Diagram

Approval stays attached to the reviewed version

Editorial conceptual model derived from the linked cases and official guidance; not a vendor architecture diagram or an exploitation sequence.

Reviewed 2026-10-02Read

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software

`/`	Focus search on this page
`Ctrl` `K`	Search everything (command palette)
`1`-`9`	Library, Generator, Playbooks, Gadgets, Checklists, Payloads, Bypasses, Utilities, Reports
`0`	AI / MCP connector
`j` / `k`	Move selection down / up
`Enter`	Expand / open selected
`c`	Copy primary command of selected
`f`	Toggle favorite on selected tool
`Esc`	Clear search / close

Research by subject

Public disclosures

Visual models

Keyboard shortcuts