Senior Red Team Operator and security researcher focused on vulnerability research, exploit development and coordinated disclosure. I audit real, maintained software, build working proofs of concept, and report findings to maintainers and CVE Numbering Authorities.
r3vpwnx.space | LinkedIn | ORCID | dilankakaushalhewage@gmail.com
Credited with 30+ published CVEs in open-source and commercial software, covering unsafe deserialization, code injection, OS command injection, path traversal and memory-safety bugs in scientific libraries, desktop applications and native code. Advisories are published on r3vpwnx.space once disclosure windows close.
Current interests: native and desktop application security, web applications, Active Directory, and AI/LLM security (agents, MCP tool integrations, RAG pipelines).
Selected CVEs
| ID | Project | Vulnerability |
|---|---|---|
| CVE-2026-120859 | PyMoDAQ | Unsafe deserialization and eval injection leading to RCE |
| CVE-2026-120833 | labbench | Pickle deserialization leading to RCE |
| CVE-2026-120499 | h5io / MNE-Python | Code injection via crafted HDF5 file |
| CVE-2026-123095 | mpv | Playlist injection in ytdl_hook |
| CVE-2026-120252 | imagecodecs | Stack buffer overflow in lossless JPEG decoder |
| CVE-2026-120251 | imagecodecs | Infinite loop in CCITT Group 4 decoder |
| GHSA-ppf5-4gw2-37j9 | GSAS-II | Pickle deserialization leading to RCE on project open |
Proof-of-concept exploits with root-cause analysis for publicly disclosed vulnerabilities. These CVEs were discovered by other researchers.
| CVE | Target | Vulnerability |
|---|---|---|
| CVE-2026-26119 | Windows Admin Center | Improper authentication to PowerShell execution |
| CVE-2025-58434 | Flowise | Unauthenticated account takeover |
| CVE-2025-57819 | FreePBX Endpoint Manager | Unauthenticated SQL injection to RCE |
| CVE-2025-55182 | React / Next.js | RSC Flight deserialization RCE |
| CVE-2025-24367 | Cacti | Authenticated graph-template RCE |
| CVE-2025-8110 | Gogs | Symlink path traversal to arbitrary file write |
| CVE-2007-2447 | Samba | username map script command injection |
- RedTeam-ADLab: automated Active Directory lab deployment
- snmpcheck: SNMP enumeration
- xl2usernames: username-list generation for assessments
- pbkdf2-hashcat-converter: PBKDF2 to Hashcat format conversion
- vpn-manager: OpenVPN manager for lab environments
OSCP+ · CRTL · CRTE · CRTP · CRTA · eCPTX · eCPPT · eWPT · eCRE · eJPT
All code and write-ups are provided for authorized security testing and education only.