Skip to content
View mescuwa's full-sized avatar
💭
I just realized I forgot to add my GPG key, so all my projects are unverified 😂
💭
I just realized I forgot to add my GPG key, so all my projects are unverified 😂

Block or report mescuwa

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mescuwa/README.md

Lumina Mescuwa | Security Researcher & ML Engineer

Building intelligent systems, finding critical vulnerabilities, and designing novel architectures. Independent researcher working at the intersection of security and AI.


Security Research

  • HackerOne: @mescuwa
  • Discovered multiple critical vulnerabilities (CVSS 7.4-9.8) in production systems
  • CVE-2025-57807 (ImageMagick): Heap OOB write. CVSS 9.8 Critical
  • CVE-2025-57803 (ImageMagick): Integer overflow in BMP writer. CVSS 8.8 High
  • CVE-2025-55160 (ImageMagick): UB in CloneSplayTree. CVSS 7.4 Moderate
  • Additional vulnerabilities in cryptocurrency infrastructure under NDA
  • Developed proprietary static analysis tooling for systematic vulnerability discovery

Key Projects & Research

Project Description
Epsilon Novel Transformer architecture with sub-quadratic attention (HQSA). Achieves 90.1% accuracy vs 85.1% baseline with 1.5x speedup. Includes full technical whitepaper.
Prometheus Autonomous AI framework replicating the scientific method. Multi-agent system integrating LLM-driven hypothesis generation with molecular docking and MD simulations.
CodeTag Professional developer tool (TUI/CLI) for codebase analysis. Integrates Semgrep and OSV-Scanner. Distributed via pipx.

Tech Stack

  • Languages: Python, C++, SQL, LaTeX, Bash/Zsh
  • AI & ML: PyTorch, Transformers, Neural Architecture Design, Multi-agent Systems, NLP, Vector Databases (LanceDB)
  • Security: Static Analysis, Vulnerability Research, Memory Safety, Fuzzing
  • Tools: Git, Docker, VS Code, pytest, ruff, Tree-sitter, Overleaf

Contact

(please hire me :3)

Pinned Loading

  1. epsilon epsilon Public

    A novel Transformer with Adaptive Computation and Quantized Attention.

    Python

  2. project-prometheus project-prometheus Public

    An autonomous AI scientist that designs and validates novel molecules.

    Python 1

  3. codetag codetag Public

    A modern, interactive TUI and CLI tool for analyzing, distilling, and packing codebases into AI-ready context.

    Python 1

  4. entropy-derby entropy-derby Public

    Inside Track / Entropy Derby is a research-grade horse-racing betting engine with fixed-point deterministic physics, VRF/BLS/VDF-backed randomness, fixed-odds and parimutuel payouts, Merkle-logged …

    C++