Back to CVEs & Disclosures
Reserved / pending

CVE Requests — In Progress

Ongoing memory-corruption and web research submitted for CVE assignment. IDs listed here once published.

Status
Pending CNA assignment
Reported
2026

Impact

  • Memory-corruption primitives in open-source native components.
  • Web-layer flaws in widely deployed self-hosted software.
  • CVE identifiers will be published in the advisories repository once assigned.

Timeline

  1. Research

    Crash triage and exploitability analysis completed.

  2. Submission

    Requests filed with the relevant CNAs.

  3. Next

    IDs and full advisories published on assignment.

View advisory on Github-advisories

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

[email protected]LinkedIn

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi