Pavlos Moros

Founding Engineer @Happenstance 🍀 // prev cofounder @huntr.com (acq by Palo Alto Networks)

pavlos

London, United Kingdom

Joined February 2025

Network

815 connections

CKSWDM

MVAYJS

SWBAIS

CGJKTS

SKJS

BAIS

ATDEIS

Summary

Hi, I’m Pavlos. I co-founded huntr.com a platform of 16k+ hackers and OSS maintainers tackling the Tragedy of the Commons in open-source security. The problem isn’t "solved" but we made a dent by becoming the #1 publisher of software vulnerabilities in the U.S. National Vulnerability Database (H1 ’22). Now, as part of the founding team at Happenstance, I’m working on 10xing the amount of luck in the world. Old ways from LinkedIn to YC Co-Founder Match to Tinder are broken because intros aren’t warm and most interactions are forced & fake. I’m a humanist and I deeply care about solving real societal issues with design and engineering. huntr+2

Work

Education

Projects

Writing

PyTorch RCE via torch.load

February 4, 2025

A vulnerability in PyTorch's model loading that allows arbitrary code execution through maliciously crafted pickle data.

huntr.com

Keras Lambda RCE on Inference

February 4, 2025

A vulnerability allowing code execution through malicious Lambda layers in Keras HDF5 model files.

huntr.com

RCE via pickle.load

February 4, 2025

A vulnerability demonstrating arbitrary code execution through Python's pickle deserialization in model loading.

huntr.com

Snappy PHAR RCE (file_exists)

January 1, 2023

PHAR deserialization vulnerability in knp-snappy that allows remote code execution when attacker-controlled files are passed via the phar:// protocol and unserialized, enabling arbitrary PHP object instantiation.

github.com