Security research
Hall of fame
The researchers who found flaws in Blumvo and reported them to us.
- Researchers
- 17
- Findings fixed
- 28
- 1Pratham Reet@pratham_reet60points
5 findings2 high, 1 medium, 2 low
- Privilege-escalation path from the student roleHigh, Jun 2026
- Practice-scoring integrity bypassHigh, May 2026
- Execution-queue abuse vectorMedium, May 2026
- Anti-cheat event-tampering vectorLow, May 2026
- Client-side maintenance-mode bypassLow, May 2026
- 2Bhavya Saini@bhavya_saini55points
4 findings2 high, 1 medium, 1 low
- Over-broad data visibility between student accountsHigh, May 2026
- Access-control gap that could reveal exam content earlyHigh, May 2026
- Anti-cheat telemetry bypassMedium, May 2026
- Code-runner configuration issueLow, May 2026
- 3Nishant Lungare@nishant_lungare40points
2 findings2 high
- Verified security findingHigh, Sep 2026
- Over-broad access to practice answer keysHigh, Jun 2026
- 4Aryan S@aryan-s30points
2 findings1 high, 1 medium
- Paid service reachable from a free accountHigh, Sep 2026
- Verified security findingMedium, Sep 2026
- 5Riddhi K@riddhi_k
- Proctoring fullscreen-enforcement bypassHigh, May 2026
- 6Wildanoel@wildanoel
- Answer checker that could reveal answers to graded questionsHigh, Sep 2026
- 7Yoga Kurniawan@yoga-kurniawan20points
2 findings2 medium
- Sign-in lockout abuseMedium, Sep 2026
- Verification-code attempt limit bypassMedium, Sep 2026
- 8Pamidi Mohith Eswar@pamidi_mohith
- Unauthenticated access to learning contentMedium, May 2026
- 9Akhin S@akhin_s
- Over-broad role-data visibilityMedium, May 2026
- 10Sumit Shah@sumitshah00
- Dangling-DNS subdomain takeover riskMedium, Jul 2026
- 11Aquib Javed@tamton-aquib10points
2 findings2 low
- Verified security findingLow, Aug 2026
- Verified security findingLow, Aug 2026
- 12Bachu Akshaya Sree@akshaya_sree
- Code-runner configuration issueLow, May 2026
- 13Nishadhul HasanLinkedIn
- Internal detail in public configuration textLow, Sep 2026
- 14Rishaan AnandLinkedIn
- Expired link on the websiteLow, Sep 2026
- 15Philip James@philipjames
- Verified security findingLow, Sep 2026
- 16Andriansyah@andriska
- Verified security findingLow, Oct 2026
- 17ArunKumar LLinkedIn
- Password change kept other sessions openLow, Nov 2026
No researcher by that name yet.
Found a flaw in Blumvo?
Report it through Security research. A fixed finding puts your name on this page.