Back to CVEs & Disclosures
Coordinated disclosure

5 Vulnerabilities Patched

Five reported vulnerabilities validated and patched by vendors following responsible disclosure.

Status
Patched by vendors
Reported
2024 – 2026

Impact

  • Authentication and access-control bypasses on production web applications.
  • Injection flaws allowing unauthorised reads of application data.
  • All findings reported privately and fixed before any public write-up.

Timeline

  1. Discovery

    Manual testing and source review identified the issues.

  2. Report

    Full PoC and remediation guidance sent to each vendor.

  3. Fix

    Vendors shipped patches; disclosure coordinated afterwards.

View advisory on Github-advisories

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi