Observed arrival · 2026-09-01

cli0ck: Five CVEs, documented before disclosure

cli0ck.com Observed source

Editorial interest 87/100 Selection signal · not a rating of the site

A two-person Riyadh vulnerability-research team publishes write-ups on bugs found in Firefox, CometChat, and related software.

Landing page captured for the 2026-09-01 issue.

Field notes

The team describes a disclosure workflow built around target selection, minimized reproducers, root-cause analysis, and private vendor reporting before publication. Its visible record spans Firefox internals and CometChat, including a content-process use-after-free rated CVSS 9.8 and a persistent group-message XSS. The page also places the work in a competitive-research context, citing results from the Tuwaiq Cyber Challenge, Black Hat MEA 2025, and Tuwaiq Mobile CTF.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

◉HumanPersonal, local, civic, or handmade

One card from the complete issue

Nobody Gets to See the Answer

315,616 arrived 1,000 judged 998 catalogued Enter the complete issue