Chris Davis is a Senior Security Consultant at Bishop Fox. His areas of expertise include application penetration testing, source code review, external network penetration testing, and large language model (LLM) security, with a current focus on researching vulnerabilities and emerging attack techniques involving AI systems.
Chris actively conducts independent security research and has been credited with the discovery of 40 CVEs (including CVE-2019-7551 and CVE-2018-17150) affecting enterprise-level, highly distributed software. His findings have included vulnerabilities such as remote code execution and cross-site scripting (XSS). His research includes LeXSS: Bypassing Lexical Parsing Security Controls, which was nominated for PortSwigger's Best Web Hacking Technique of 2021.
Chris completed the Cybersecurity Training Program at SecureSet Academy in addition to full stack development at University of Denver.
From Chris Davis
Research & Events
Blog / Technical Research
LEXSS: Bypassing Lexical Parsing Security Controls
Jun 22, 2021
Blog / Advisories
Froala Editor, Version 3.2.6 Advisory
Jun 02, 2021
Blog / Advisories
CRAN Version 4.0.2 Advisory
Jan 11, 2021
Blog / Advisories
Security Advisory: Immuta Version 2.8.2
Nov 04, 2020
Blog / Advisories
Winston Privacy Version 1.5.4
Oct 27, 2020
Blog / Advisories
TinyMCE, Version 5.2.1 Advisory
Aug 12, 2020
Blog / Advisories
LibreHealth Version 2.0.0
Jul 14, 2020
Blog / Advisories
SecureAuth Version 9.3
Jun 19, 2020
Blog / Advisories
Big Monitoring Fabric Application
Dec 30, 2019
Blog / Advisories
Solismed Version 3.3SP1
Dec 09, 2019
Blog / Industry
OpenEMR 5.0.1(6) - Technical Advisory Release
Sep 11, 2019
Blog / Advisories
OpenEMR 5.0.1(6) - RCE and XSS
Sep 10, 2019
Blog / Advisories
InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities
Jul 24, 2019
Blog / Advisories
Cantemo Portal Version 3.8.4 - Cross-Site Scripting
Mar 08, 2019
