> CTF / PENTEST / REDTEAM / RESEARCH _
Hi there, I'm Toàn Thắng (#attom).
I am currently navigating my third year as a Computer Science @ Hanoi University of Science and Technology. My professional journey is deeply rooted in offensive security. I currently work in Application Security at VinSOC, and serve as proud member of BKSec - Head of Web Exploitation. I actively participate in CTF competitions with my teammates, it's a fantastic way for us to connect, have fun, and continuously learn from each other to elevate our skills. My goal is to dive deep into vulnerability research and redteaming, figuring out how everything works under the hood, discovering new vulnerabilities and challenging myself. Always happy to connect! Whether you want to discuss some cool stuffs or just say hi, my inbox is open. 👾 `> SYSTEM_LOG:` Unauthorized entity detected. You are visitor  to breach this mainframe.Please do not drop my tables. |
ID | DATE | TARGET | TYPE | SEV | ADVISORY | REF |
|---|---|---|---|---|---|---|
CVE-2026-59895 | 23-06-2026 | Hono | XSS | 🟡 Moderate | [GHSA-w62v-xxxg-mg59] | www.cve.org |
CVE-2026-55677 | 14-06-2026 | Echo | Path Traversal | 🟠 High | [GHSA-vfp3-v2gw-7wfq] | www.cve.org |
CVE-2026-55421 | 12-06-2026 | Open edX Platform | SSRF | 🟡 Moderate | [GHSA-fpf9-9rpr-jvrx] | --- |
CVE-2026-54281 | 08-06-2026 | NestJS | Incorrect Authorization | 🟠 High | [GHSA-6v32-fjc9-9qf6] | www.cve.org |
CVE-2026-48489 | 27-05-2026 | Symfony | Incorrect Authorization | 🟠 High | [GHSA-6h46-9jf5-q59x] | symfony.com |
CVE-2026-48120 | 22-05-2026 | Kakoune | Command Execution | 🟠 High | [GHSA-h99r-h8cp-vwcq] | --- |
CVE-2026-45077 | 21-05-2026 | Symfony | Insecure Deserialization | 🟠 High | [GHSA-m7v2-7gxm-vc2v] | symfony.com |
[ EOF ]