Xanlar Agamalizade
Cybersecurity Researcher
Penetration Tester
OSINT Analyst
Cyber Threat Intelligence
Security Advisories & CVEs
ArcadeDB — Unauthenticated Database Access CVE
The Redis wire-protocol plugin bound no authenticated principal, exposing every database to remote read, write, and delete.
Red Hat — Incorrect Authorization CVE
Satellite granted access when only one of several required permission checks passed, exposing subscription data and entitlements across organizations.
Red Hat — Insecure Direct Object Reference CVE
Quay did not check that a build trigger belonged to the requested repository, exposing other repositories' triggers and their write tokens.
Red Hat — Insecure Direct Object Reference CVE
Quay returned a repository's cleanup policy without checking which account owned it, revealing settings from other users' repositories.
OpenNMS — Missing Authorization CVE
Spring Security rules for /api/v2 omitted PATCH, letting unauthenticated requests disable event definitions and SNMP collection.
OpenNMS — SQL Injection CVE
Shipped asset reports spliced the DATE_FORMAT parameter unescaped into SQL, exposing stored credentials to low-privileged users.
OpenNMS — JEXL Sandbox Bypass CVE
A crafted expression submitted to the Measurements REST API escaped the sandbox and loaded arbitrary Java classes.
WordPress — Arbitrary Plugin Installation CVE
The Vayu X theme exposed its AJAX nonce to every authenticated user without a capability check, letting subscribers install and activate any plugin.
WordPress — Broken Access Control CVE
An AJAX handler in the WP Maps plugin shipped without a capability check or nonce, letting subscribers write unbounded autoloaded options.
OpenClaude — OAuth State Bypass CVE
Missing state-parameter validation in the OAuth callback allowed remote termination of authenticated sessions.
FileRise — OIDC Account Takeover CVE
SSO login matched local accounts on mutable preferred_username and email claims with no email_verified check, allowing sign-in as admin.
FileRise — TOTP Rate-Limit Bypass CVE
Failed second-factor attempts were counted in session state, so restarting the login flow reset the counter and allowed unlimited guessing.
FileRise — Missing Step-Up Authentication CVE
Disabling or enrolling a second factor required no password or current code, and new secrets activated before a single code was verified.
FileRise — TOTP Code Replay CVE
The verifier never recorded the consumed time-step, leaving a captured six-digit code replayable throughout its validity window.
FileRise — Hardcoded Encryption Key CVE
A configuration fallback silently accepted a published default key, exposing TOTP seeds, OIDC secrets, and storage credentials.
Enterprise Security Acknowledgements Bug Bounty
Acknowledged and thanked for identifying and reporting critical security vulnerabilities.
Technical Skills
Red Team
Simulation
Simulating real-world attack scenarios to test organizational defense capabilities and conducting stealth operations.
Active Directory
Security
Deep AD analysis focused on privilege escalation paths, lateral movement, and domain dominance scenarios.
Web Application
Security
Offensive assessments aligned with OWASP Top 10 standards. Vulnerability discovery and technical reporting.
Open Source
Intelligence (OSINT)
Digital profiling and intelligence reports through the collection and analysis of open-source data.
Geospatial
Intelligence (GEOINT)
Analysis of satellite imagery and geographic data. Geolocation identification and visual data verification.
Social Media
Intelligence (SOCMINT)
Tracking digital footprints across social platforms. Behavioral modeling and network mapping.
Cyber Threat
Intelligence (CTI)
Monitoring threat actors and attack vectors. Processing intelligence data for strategic decision-making.
Threat Actor
Profiling
Analysis of TTPs (Tactics, Techniques, and Procedures) of APT groups and individual actors. Motivation-based profiling.
Dark Web
Monitoring
Proactive monitoring of data leaks on the dark web. Analysis of stolen credentials and leaked corporate data.