Hall of Fame and Public Acknowledgments

Hall of Fame

Public, third-party records that credit me by name as Adesh Nandkishor Kolte or Adesh Kolte. Every card below links directly to the source, so every entry is independently verifiable.

  • Microsoft · BlackHat 2018

    Top 100 Security Researchers: Rank #70

    Named on Microsoft's official Top 100 list at BlackHat 2018, ranked 70th worldwide. The MSRC also issued a Top 100 commemorative coin.

    View MSRC blog post
  • Microsoft · MSRC Online Services

    10 Monthly Acknowledgments (2017–2018)

    Listed in the Microsoft Security Researcher Acknowledgments archive across ten separate months: March, April, August, September, November 2017, and March, April, May, June, July 2018.

    View archived MSRC Online Services list
  • Apple

    Web Server Security Acknowledgements: August 2018

    "Adesh Nandkishor Kolte of Independent Security Researcher, India (@AdeshKolte)"

    View Apple Support page (2017–2018)
  • Apple

    Web Server Security Acknowledgements: December 2020

    "Adesh Nandkishor Kolte"

    View Apple Support page (2019–2020)
  • Google

    Bug Hunters: Researcher Profile

    Public Google Bug Hunters profile recognizing reported security issues across Google products.

    View Google Bug Hunters profile
  • AT&T · HackerOne

    Bug Bounty Q1 2018: $750 + $1,000 RCE / CSRF

    Independent researcher payouts from AT&T's HackerOne program for remediated vulnerability submissions, including a CSRF leading to account takeover.

    View AT&T program on HackerOne
  • D-Link · Security Advisory SAP10489

    DIR-819: Unauthenticated Admin Session Termination

    Listed by D-Link as a Report #1 reporter for a vulnerability allowing unauthenticated attackers on the local network to terminate active administrative sessions in the DIR-819 web admin interface. Advisory published 23 January 2026.

    View D-Link advisory SAP10489
  • HackerOne

    Researcher Profile: hackeradeshkolte

    Public HackerOne profile with disclosed reports across multiple programs.

    View HackerOne profile
  • HostBill

    Security Acknowledgements: Responsible Disclosure

    "Adesh Nandkishor Kolte"

    View HostBill responsible disclosure page
  • Zoho

    Bug Bounty Hall of Fame

    Listed in Zoho's Bug Bounty program for reported vulnerabilities.

    View Zoho Bug Bounty Hall of Fame

CVE Credits

Public CVE entries on NVD that reference my research:

  • CVE-2020-7997 · ASUS

    XSS in ASUS WRT-AC66U 3 Parental Control

    Cross-site scripting in the Client Name field of the Parental Control feature. Affected firmware: 3.0.0.4.372_67. CVSS 6.1.

    View NVD entry
  • CVE-2020-7998 · iOS

    Arbitrary File Upload: Super File Explorer 1.0.1

    Unauthenticated arbitrary file upload via the FTP/Web UI services in a developer path with no default password protection.

    View NVD entry
  • CVE-2020-15907 · Mahara

    Stored XSS via File and Folder Names

    Affects Mahara 19.04 (before 19.04.6), 19.10 (before 19.10.4), and 20.04 (before 20.04.1). Cataloged at VulDB #159393.

    View NVD entry

Proof Gists

Public proof-of-concept gists referenced by the CVE entries above:

  • GitHub Gist

    CVE-2020-7997: ASUS WRT-AC66U PoC

    Reference link from the official NVD CVE-2020-7997 entry.

    View gist
  • GitHub Gist

    CVE-2020-7998: Super File Explorer iOS PoC

    Reference link from the official NVD CVE-2020-7998 entry.

    View gist