Cybersecurity professional with ~10 years of experience across IT engineering, vulnerability management, threat intelligence, threat detection and incident response.

In my free time, I hunt for zero-day software vulnerabilities and participate in bug bounty programs.

I was a GrrCON 2025 main stage speaker on independent vulnerability research, presenting on how I discovered my first CVE.

• 🔗 LinkedIn - Seth Kraft
• 🐦 Twitter @skraft09

• 🎯 CVE-2025-29471 – Authenticated Stored XSS + Privilege Escalation in Nagios Log Server 💥PoC Code | ▶️ PoC Demo | 📰 Featured

• 🧨 CVE-2025-44824 – Authenticated Elasticsearch DoS via API in Nagios Log Server 💥PoC Code | ▶️ PoC Demo | 📰 Featured

• 🔑 CVE-2025-44823 – Authenticated API Key Exposure in Nagios Log Server 💥PoC Code | ▶️ PoC Demo | 📰 Featured

• ⚡CVE-2025-53392 – Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface 💥PoC Code

• 💥 CVE-2025-54138 – Authenticated Remote File Inclusion in LibreNMS 25.6.0 via ajax_form.php 💥PoC Code

• 🕵️ Data Exfiltration – Recovered 300+ insurance policies from a misconfigured system at a Fortune 500 organization.

• 👁️ Vulnerability Research – Discovered three vulnerabilities in Elastic software.

• 📂 Sensitive Information Disclosure – Located sensitive data exposed via public S3 buckets.

• 🧾 Privacy Flaws – Discovered user privacy risks via exposed PII through metadata from API endpoints on a widely used digital content platform.

cybersecurity-research-tools

cve-publications