Vulnerabilities | Shalitha Madhuwantha

root@shalitha:~# cat advisories.log

Vulnerabilities & Advisories

Security issues I have found through authorised testing and research, disclosed responsibly. Each entry lists the timeline, identifiers and links to the write-up or logs.

3 advisories · High 2, Medium 1

MediumReported21 March 2026

Microsoft SharePoint

Microsoft · SharePoint

Identified a vulnerability in Microsoft SharePoint during independent research and reported it responsibly.

Read advisory

HighReported4 September 2025

Hutch Sri Lanka website — XSS, misconfigurations and data exposure

Hutch Sri Lanka · Corporate website

Found multiple issues in Hutch Sri Lanka's website during self-directed research: cross-site scripting, security misconfigurations and sensitive data exposure.

CWE-79
CWE-16
CWE-200

Read advisory

HighReported1 April 2024

KodeKloud — broken access control on premium content

KodeKloud · Learning platform

Found and reported a broken access control vulnerability that allowed access to a premium course without payment.

CWE-284
CWE-639

Read advisory

Found something in code I maintain? Please report it responsibly — see security.txt.

root@shalitha:~# loading…