Try BlumvoBook a demo
Sign inTry BlumvoBook a demo
Security research

Hall of fame

The researchers who found flaws in Blumvo and reported them to us.

Researchers
17
Findings fixed
28

Standings

Points a finding: critical 40, high 20, medium 10, low 5.

  1. 1
    Pratham Reet@pratham_reet
    5 findings2 high, 1 medium, 2 low
    • Privilege-escalation path from the student roleHigh, Jun 2026
    • Practice-scoring integrity bypassHigh, May 2026
    • Execution-queue abuse vectorMedium, May 2026
    • Anti-cheat event-tampering vectorLow, May 2026
    • Client-side maintenance-mode bypassLow, May 2026
    60points
  2. 2
    Bhavya Saini@bhavya_saini
    4 findings2 high, 1 medium, 1 low
    • Over-broad data visibility between student accountsHigh, May 2026
    • Access-control gap that could reveal exam content earlyHigh, May 2026
    • Anti-cheat telemetry bypassMedium, May 2026
    • Code-runner configuration issueLow, May 2026
    55points
  3. 3
    Nishant Lungare@nishant_lungare
    2 findings2 high
    • Verified security findingHigh, Sep 2026
    • Over-broad access to practice answer keysHigh, Jun 2026
    40points
  4. 4
    Aryan S@aryan-s
    2 findings1 high, 1 medium
    • Paid service reachable from a free accountHigh, Sep 2026
    • Verified security findingMedium, Sep 2026
    30points
  5. 5
    Riddhi K@riddhi_k
    • Proctoring fullscreen-enforcement bypassHigh, May 2026
    20points
  6. 6
    Wildanoel@wildanoel
    • Answer checker that could reveal answers to graded questionsHigh, Sep 2026
    20points
  7. 7
    Yoga Kurniawan@yoga-kurniawan
    2 findings2 medium
    • Sign-in lockout abuseMedium, Sep 2026
    • Verification-code attempt limit bypassMedium, Sep 2026
    20points
  8. 8
    Pamidi Mohith Eswar@pamidi_mohith
    • Unauthenticated access to learning contentMedium, May 2026
    10points
  9. 9
    Akhin S@akhin_s
    • Over-broad role-data visibilityMedium, May 2026
    10points
  10. 10
    Sumit Shah@sumitshah00
    • Dangling-DNS subdomain takeover riskMedium, Jul 2026
    10points
  11. 11
    Aquib Javed@tamton-aquib
    2 findings2 low
    • Verified security findingLow, Aug 2026
    • Verified security findingLow, Aug 2026
    10points
  12. 12
    Bachu Akshaya Sree@akshaya_sree
    • Code-runner configuration issueLow, May 2026
    5points
  13. 13
    Nishadhul HasanLinkedIn
    • Internal detail in public configuration textLow, Sep 2026
    5points
  14. 14
    Rishaan AnandLinkedIn
    • Expired link on the websiteLow, Sep 2026
    5points
  15. 15
    Philip James@philipjames
    • Verified security findingLow, Sep 2026
    5points
  16. 16
    Andriansyah@andriska
    • Verified security findingLow, Oct 2026
    5points
  17. 17
    ArunKumar LLinkedIn
    • Password change kept other sessions openLow, Nov 2026
    5points

Found a flaw in Blumvo?

Report it through Security research. A fixed finding puts your name on this page.