Just another Freelance Offensive Security Professional. The posts in this blog are snippets of my work that can be shared publicly.https://davidcarliez.github.io/https://davidcarliez.github.io/posts/bypassing-google-gemini-cli-security-measures/https://davidcarliez.github.io/posts/bypassing-google-gemini-cli-security-measures/Two rejected Google VRP reports and one design concern from my Gemini CLI testing: a blocked-command bypass, an MCP startup policy bypass, and an MCP permission-scope issue.Sat, 13 Jun 2026 00:00:00 GMThttps://davidcarliez.github.io/posts/cve-2026-58635-braille-to-system/https://davidcarliez.github.io/posts/cve-2026-58635-braille-to-system/Exploit development for the Windows Narrator Braille vulnerability, from an unauthenticated BrlAPI parameter write to LocalService execution and an optional SYSTEM shell.Thu, 16 Jul 2026 00:00:00 GMThttps://davidcarliez.github.io/posts/vim-python-omni-completion-rce/https://davidcarliez.github.io/posts/vim-python-omni-completion-rce/Root cause and exploit primitive for GHSA-65p9-mwwx-7468 / CVE-2026-52860, a Vim Python omni-completion arbitrary code execution bug fixed in 9.2.0597.Fri, 19 Jun 2026 00:00:00 GMThttps://davidcarliez.github.io/posts/windows-appresolver-lpe-to-system/https://davidcarliez.github.io/posts/windows-appresolver-lpe-to-system/Exploit development for a Windows AppResolver authorization issue fixed in July 2026, from a zero-capability AppContainer to an interactive SYSTEM shell.Fri, 17 Jul 2026 00:00:00 GMT