PAYATU

Surya Rawal

Red Team - Associate Security Consultant
Payatu bandit focused on mobile application security and IoT, firmware and hardware security. Has authored 3 blogs, 2 published CVEs for Payatu.
PAYATU

Surya Rawal

Red Team - Associate Security Consultant
Payatu bandit focused on mobile application security and IoT, firmware and hardware security. Has authored 3 blogs, 2 published CVEs for Payatu.
Payatu bandit focused on mobile application security and IoT, firmware and hardware security. Has authored 3 blogs, 2 published CVEs for Payatu.
PAYATU

Surya Rawal

Red Team - Associate Security Consultant

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

CVE-2026-8971: Mozilla Firefox Same-Origin Policy Bypass via JAR URI Null Byte Handling

Exploitation occurs when a target loads a specifically crafted jar:, resource:///, or moz-extension:// URI, whether through direct navigation, a redirect served by attacker controlled web content, or…
Browser
Spoofing
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
No items found.

Articles by  

Surya Rawal

Application Security
How a Double-Encoded Null Byte Turns a ZIP File into an XSS Vector – CVE-2026-2790
April 24, 2026
10 min
Application Security
Security leaders
Researchers
For Security Leaders
Mobile
AI / ML
Android Lock Screen Bypass Through Google Gemini
September 30, 2025
8 min
Mobile
AI / ML
Researchers
Security leaders
Engineers
For Security Leaders
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
All
Bandits
Management

Aman Aryan

Consulting, Research and IT Head
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Aman Aryan

Consulting, Research and IT Head
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

Impressed by the work? Point it at your systems.

Bring the research depth behind these advisories to your own product, app or infrastructure.

Talk to an expert
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
Explore our research
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.