Anees Hyder Charolia

Wordpress Developer | Cyber Security Researcher | CVE-2026-25523

[Anees Hyder Charolia @aneesOx_dev]

Proud to share that I’ve officially been added to the World Health Organization (WHO) Hall of Fame!

After having my vulnerability reports accepted for finding security gaps in their systems, it’s amazing to see my contributions recognized.
#CyberSecurity #BugBounty #WHO

[Anees Hyder Charolia @aneesOx_dev]

I was playing around google calendar and found this 2010 version still functional.

https://t.co/EY6patEMQA

[Anees Hyder Charolia @aneesOx_dev]

@mdp_sec Thanks

[Anees Hyder Charolia @aneesOx_dev]

Just found out that I have been added to the CERT-In Hall of Fame for discovering and responsibly disclosing an IDOR vulnerability in UMANG web app.

#CyberSecurity #CERTIn #IDOR #BugBounty #InfoSec #EthicalHacking

[Anees Hyder Charolia @aneesOx_dev]

@UnitedIndiaInsu If you're concerned about customers' data, please DM me or provide an email address for communication. I have identified security flaws in some of your portals.

[Anees Hyder Charolia @aneesOx_dev]

https://t.co/qTb2YDckDg

[Anees Hyder Charolia @aneesOx_dev]

@amincharoliya Thanks

[Anees Hyder Charolia @aneesOx_dev]

Proud to share that I’ve officially been added to the World Health Organization (WHO) Hall of Fame!

After having my vulnerability reports accepted for finding security gaps in their systems, it’s amazing to see my contributions recognized.
#CyberSecurity #BugBounty #WHO

[Anees Hyder Charolia @aneesOx_dev]

https://t.co/VSbS3BHBKU

[Anees Hyder Charolia @aneesOx_dev]

@CryptooIndia It would be better if they prioritized resolving vulnerabilities reported by security researchers.

[Anees Hyder Charolia @aneesOx_dev]

@UnitedIndiaInsu I have identified multiple vulnerabilities on your portals, which include data leaks of lakhs of policies containing emails, mobile numbers, and bank accounts of consumers. As I couldn't find any safe channel to send the details, please share an email address.

[Anees Hyder Charolia @aneesOx_dev]

Just reviewed an email from GoDaddy regarding a recent security incident. It appears an attacker managed to gain unauthorized access to customer email addresses and contact information.

#godaddy #securityincident #cyberattack

[Anees Hyder Charolia @aneesOx_dev]

Another report accepted by WHO.

#bugbounty #CyberSecurity

[Anees Hyder Charolia @aneesOx_dev]

@jmiu_official I have identified a critical vulnerability in one of your administrative platform. Can you please ask your “Web Information Manager” to check his email?

[Anees Hyder Charolia @aneesOx_dev]

@CyberRacheal I got a CVE for this exact bug on Magento LTS. Never overlook this.

[Anees Hyder Charolia @aneesOx_dev]

Found a critical Broken Access Control / IDOR vulnerability on a social platform (2.5M+ users) that allows unauthorized modification of any user's profile info (username, avatar, bio) via a direct PATCH request. 🚨
Reported to CERT-In! 🇮🇳 #CyberSecurity #BugBounty #InfoSec

[Anees Hyder Charolia @aneesOx_dev]

@itspraveen70140 @ni5arga I once got a CVE from a website issue, it depends on the issue. https://t.co/IkxwjeRvZv

[Anees Hyder Charolia @aneesOx_dev]

@ni5arga That’s a great work! I have found a critical vulnerability in a social networking website in India, Can I send it to CERT-In?

[Anees Hyder Charolia @aneesOx_dev]

Found and disclosed API vulnerabilities in a web app.
#CyberSecurity #ethicalHacking

[Anees Hyder Charolia @aneesOx_dev]

Another vulnerability reported and remediated! X
Just verified the fix for an unauthenticated notification deletion flaw I disclosed to CERT-In.
Appreciate the team's quick response and effort in securing public infrastructure.

#BugBounty
#CyberSecurity #CERTin