Research

CVEs & Disclosures

Responsibly reported vulnerabilities and vendor-patched findings.

Github-advisories

Repository tracking my published GitHub security advisories and CVE requests.

— stars— forksUpdated —

5 Vulnerabilities Patched

Coordinated disclosure

Five reported vulnerabilities validated and patched by vendors following responsible disclosure.

Read details

28 Findings — Education & Gov

12 Critical · 7 High · 11 Low-Mid

Coordinated assessment of multiple college portals and a government site; all issues reported to the owners.

Read details

Reflected XSS — Public Program

Rewarded

Reflected cross-site scripting on a public bug bounty program, triaged and rewarded within hours of testing.

Read details

CVE Requests — In Progress

Reserved / pending

Ongoing memory-corruption and web research submitted for CVE assignment. IDs listed here once published.

Read details

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

[email protected]LinkedIn

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi