CVE Advisory
2021 
khoadha
Also known as: l0ggg
Researcher
Security Research
Security researcher specializing in Java and enterprise application security. He has discovered several zero-day vulnerabilities across major platforms including Atlassian, ManageEngine, Oracle, VMware, and Microsoft, notably contributing to the SharePoint ToolShell vulnerability (2025).
15
Advisories
0
Publications
3
Recognition
4
Vendors
Activity Overview
Last 12 Months Activity
Oct
1
Nov
Dec
Jan
1
Feb
Mar
Apr
May
1
Jun
Jul
1
Aug
Sep
Top Vendors
Microsoft 9 vulnerabilities
Atlassian 3 vulnerabilities
Oracle 2 vulnerabilities
Zoho 1 vulnerability
Discovery Timeline
2026
3 advisories 🔒 Advisory
VCSA-2026-Q2-01
SharePoint Server EditingPagePaser filter bypass to RCE
Microsoft
🔒 Advisory
CVE-2026-55040
SharePoint Server Subscription Edition SPApplicationAuthenticationModuleV2 Improper Authentication
Microsoft
🔒 Advisory
CVE-2026-33112
SharePoint XmlValidator bypass lead to ExcelDataSet insecure deserialization
Microsoft
2025
4 advisories , 2 awards 🏆 Recognition
Top 5 Pwn2Own Ireland (IoT) 2025
Canon, Lexmark, Home Assistant, Philips
🏅 Pwn2Own
🔒 Advisory
CVE-2025-49706
Microsoft SharePoint authentication bypass
Microsoft
🔒 Advisory
CVE-2025-49704
Microsoft SharePoint insecure deserialization
Microsoft
🔒 Advisory
CVE-2025-53771
Microsoft SharePoint authentication bypass
Microsoft
🔒 Advisory
CVE-2025-53770
Microsoft SharePoint insecure deserialization
Microsoft
🏆 Recognition
Top 2 Pwn2Own Berlin 2025
Oracle, Microsoft, NVIDIA
🏅 Pwn2Own
2024
1 advisory , 1 award2022
5 advisoriesCVE Advisories 15
Security vulnerabilities discovered and disclosed
CVE Advisory
2021 CVE Advisory
2022 CVE Advisory
2022 CVE Advisory
2022 CVE Advisory
2022 CVE Advisory
2022 CVE Advisory
2024 CVE Advisory
2025 CVE Advisory
2025 CVE Advisory
2025 CVE Advisory
2025 CVE Advisory
2026 CVE Advisory
2026 CVE Advisory
2026 Recognition & Highlights 3
Bug bounty rewards and achievements
Recognition
2024 Recognition
2025 Recognition
2025