# Mehmet Ince @mdisec \- Vulnerability Researcher \| Building security products \| Security Advisor \| Amateur Muay Thai fighter: a hacker at heart, a builder by practice, and a mentor by purpose\. As co\-founder of PRODAFT, I’ve spent the last two decades in vulnerability research and security product engineering\.

Generated by Yoast SEO v28.2, this is an llms.txt file, meant for consumption by LLMs.

## Pages
- [Hi I'm Mehmet Ince](https://mehmetince.net/)
- [About](https://mehmetince.net/about-me/)
- [Disclosed CVEs](https://mehmetince.net/cve/)
- [Posts](https://mehmetince.net/posts/)

## Posts
- [Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain \(ZDI\-25\-099, ZDI\-25\-097, ZDI\-25\-096\)](https://mehmetince.net/inside-posthog-how-ssrf-a-clickhouse-sql-escaping-0day-and-default-postgresql-credentials-formed-an-rce-chain-zdi-25-099-zdi-25-097-zdi-25-096/)
- [The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre\-Auth RCE in a Security Appliance](https://mehmetince.net/the-story-of-a-perfect-exploit-chain-six-bugs-that-looked-harmless-until-they-became-pre-auth-rce-in-a-security-appliance/)
- [Digital Cosmos: A Journey Through the Galaxy of Vulnerabilities](https://mehmetince.net/digital-cosmos-a-journey-through-the-galaxy-of-vulnerabilities/)
- [The Chessboard of Security: Insights on Product Development and Vulnerabilities from a Hacker Perspective](https://mehmetince.net/the-chessboard-of-security-insights-on-product-development-and-vulnerabilities-from-a-hacker-perspective/)

## Disclosed Vulnerabilities
- [CVE\-2026\-58139 \- DuckDB AWS Extension Security Policy Bypass via load\_aws\_credentials Procedure](https://mehmetince.net/vulnerability/cve-2026-58139-cve-2026-58139-duckdb-aws-extension-security-policy-bypass-via-load_aws_credentials-procedure/)
- [CVE\-2026\-50738 \- Use\-After\-Free Vulnerability](https://mehmetince.net/vulnerability/cve-2026-50738-cve-2026-50738-use-after-free-vulnerability/)
- [CVE\-2026\-50737 \- Privilege Escalation via Default Expression Execution](https://mehmetince.net/vulnerability/cve-2026-50737-cve-2026-50737-privilege-escalation-via-default-expression-execution/)
- [CVE\-2026\-50736 \- Remote Command Execution](https://mehmetince.net/vulnerability/cve-2026-50736-cve-2026-50736-remote-command-execution/)
- [CVE\-2026\-50735 \- Out\-of\-Bounds Read Vulnerability](https://mehmetince.net/vulnerability/cve-2026-50735-cve-2026-50735-out-of-bounds-read-vulnerability/)

## Categories
- [Vulnerability Research](https://mehmetince.net/category/vulnerability-research/)
- [Appsec](https://mehmetince.net/category/appsec/)
- [Uncategorized](https://mehmetince.net/category/uncategorized/)

## Tags
- [exploit](https://mehmetince.net/tag/exploit/)
- [advisory](https://mehmetince.net/tag/advisory/)
- [cve](https://mehmetince.net/tag/cve/)
- [0day](https://mehmetince.net/tag/0day/)
- [metasploit](https://mehmetince.net/tag/metasploit/)

## Optional
- [Sitemap index](https://mehmetince.net/wp-sitemap.xml)