YMsora~X#

People are connected.

About · Archive · Updates · GitHub · Bilibili

Hello. I’m YMsora, someone with a very wide range of interests. I like the World Wide Web, ACG, subcultures, music, performance, psychology, philosophy, and more.

I currently work in cybersecurity and computer security research, and I am also a bug bounty hunter.

A few things about me:

Research on Microsoft’s supply-chain components, with more than USD 10,000 in bounties received.

Microsoft MSRC 2026 Azure DevOps annual component track, global RANK #5.

Listed in Microsoft’s researcher recognition program, Special Mentions.

A Google VRP OSS open-source S2 vulnerability report, and a top-30 ranking in China on Google VRP.

I ranked in the top 20 on the Matomo H1 2026 leaderboard for a password-bypass vulnerability.

Multiple reports to Chia Network, along with a place in its 2026 Hall of Fame.

hackerone.com/ymsora

Co-discovered CVE-2026-40400, with a CVSS score of 8.0.

🔃 Security Update Guide - Loading - Microsoft

and CVE-2026-70338

And:

I compete in Capture the Flag events with the V&N joint team.

I enjoy exploring all kinds of vulnerabilities and security fields, including Wi-Fi security, smart-contract security, Bluetooth security, AI security, binary security, IoT security, and more.

My primary languages are Python and JavaScript; I can also work with PHP, Go, and others.

Exploration is always exciting, whatever the subject may be.

I also keep learning and experimenting with software development, and I have made some fun little projects on my own GitHub.

https://github.com/YMs0ra/

I also run a WeChat public account called “YMs0ra的安全漫路”.

I publish some of my articles on Xianzhi Community and Linux.do as well.

Beyond that, I am passionate about practicing romanticism and want to understand many different things. I think that is also part of what drives me.

You can find my personal writing on this blog.

And I really love single-player games. Feel free to talk to me about them, haha.

VRChat, performing jazz, blues, rock, literature and aesthetics shaped by mono no aware…

Of course, this is only a small part of me. If you would like to contact me, my email is below.

heishizixing@gmail.com