Penetration Testing
01Burp SuiteNmapSQLmapCymulateAkamai WAF
b3z@terminal:~$ ./profile --summary
Thinnawarth Mathuros
Senior Cybersecurity Consultant | Security Researcher | Builder with engineering roots
Cybersecurity consultant with hands-on experience in SOC operations, penetration testing, vulnerability research, and secure system development. Background in full-stack engineering and DevOps helps bridge practical security work with delivery.
current_role
Senior Cybersecurity Consultant
Secure D Center Co.,Ltd.
published_research
55 CVE records found
Latest publication: Sep 11, 2026
> ls skills/
Skills
SOC & Monitoring
02SecuronixAlienVaultCloudsekIncident ResponseThreat Hunting
Programming
03GoJavaScriptSQLPythonBash
Infrastructure
04DockerKubernetesRedisMySQLPostgreSQL
Frontend
05ReactNext.js
Delivery
06GitGitLabGitLab CI/CDSecure Coding
> ls projects/
Featured Work
Security Operations
Worked on SOC monitoring, alert analysis, response workflows, and visibility improvements for enterprise environments.
SOCThreat DetectionIncident Response
Security Automation
Built automation that reduced repetitive security operations work and improved operational consistency.
AutomationSecurity OperationsWorkflow
Pentesting and Assessment
Performed application, network, and infrastructure security assessments with remediation-focused reporting.
PentestReportingValidation
WordPress Vulnerability Research
Conducted vulnerability research and responsible disclosure work across WordPress plugins, with published CVE records and recognition from vulnerability programs.
ResearchDisclosureCVE
Cybersecurity Training
Delivered practical blue team and red team training focused on detection, response, and offensive testing exercises.
TrainingBlue TeamRed Team
Payment Platform Engineering
Built backend systems for payment-related workflows, automation, and operational support.
GoMySQLRedisKubernetes
Product security / MSI
MSI Product Security Advisories
Product Security
Visit MSI's official Product Security Advisories page for product security announcements and details from the vendor.
open MSI security advisoriesProduct security / HP
HP CVE Research
Featured ResearchHigh 7.0hp
CVE-2026-82346Published Aug 31, 2026
HP ImageDiags - Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
affected_product
HP Inc / HP ImageDiags
researcher_match
benzdeusthinnawarth
> ./fetch-cves --source cve.org
WordPress CVE Research
unique_cves
54
WordPress records merged from both public search terms
Published Dec 18, 2025
WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in jetmonsters Hotel Booking Lite motopress-hotel-booking-lite allows Remote Code Inclusion.This issue affects Hotel Booking Lite: from n/a through <= 5.2.3.
benzdeus
Published Sep 11, 2026
WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
benzdeus
Published Sep 11, 2026
WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
benzdeus
Published Nov 21, 2025
WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.13.
benzdeus
Published Dec 23, 2025
WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through <= 1.1.13.
benzdeus
Published Jun 15, 2026
WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.
benzdeus
Showing 6 of 54 CVE records
> cat contact.txt
Contact & Proof
> cat awards.txt
- NCSA AI CTF 2026: achieved 2nd place.
- Reached #7 on the Patchstack researcher leaderboard in October 2025, becoming the first Thai researcher in the Top 10.
- Startup Thailand 2017: awarded 100,000 Baht in funding.
> cat education.txt
HCCDA-AI, HuaweiAdvanced Cybersecurity Specialist Program (2024), THNCA under NCSA ThailandAkamai Web App & APIGolang Certification, KBTGCyber security classnest #2, KBTG