About

Mihnea-Luca “elure” Mărășescu.

Cybersecurity, Infra and Hardware.

mihnea@elure.dev

Biography

I’m Mihnea-Luca “elure” Mărășescu, a Romanian high-schooler, CTF competitor, vulnerability researcher, and founder of OmniCYBR.

I build security and systems projects. My current work includes OmniCYBR, vulnerability research with disclosed CVEs, hardware, and a homelab.

Disclosures

  1. CVE-2026-39903

    Simple Machines Forum · 10 July 2026

    An authorisation bypass in Sources/Actions/AttachmentApprove.php: a single-character operator error made the permission check always pass.

    Affected < 2.1.8 · < 3.0 Alpha 5 - fixed in 2.1.8 · 3.0 Alpha 5

  2. CVE-2026-39921

    GeoNode · 10 April 2026

    Server-side request forgery through the document upload flow: the doc url parameter accepted arbitrary destinations.

    Affected 4.0 - 4.4.5 · 5.0 - 5.0.2 - fixed in 4.4.5 · 5.0.2

  3. CVE-2026-39922

    GeoNode · 10 April 2026

    A second server-side request forgery affecting the same GeoNode releases.

    Affected 4.0 - 4.4.5 · 5.0 - 5.0.2 - fixed in 4.4.5 · 5.0.2

Practice

Research
Investigate software behaviour and document findings.
Compete
Solve CTF challenges and work with teams.
Build
Develop platforms, hardware, and infrastructure.
Document
Publish methods, decisions, and lessons.

Explore

Projects, writing, and updates.

Browse published work or follow updates through RSS.