_ __ ___ _ ____ _____ ____ __ __
| |/ /|_ _|| | / ___| | ____|| _ \ \ \ / /
| ' / | | | | \___ \ | _| | |_) | \ \ / /
| . \ | | | |___ ___) || |___ | _ < \ V /
|_|\_\|___||_____| |____/ |_____||_| \_\ \_/
> Guilherme (Kilserv) is a Security Researcher & Red Team Operator.
> Specializing in offensive engineering, manual code review, and high-impact vulnerability disclosure.
kilserv@~ $
grep 'HIGH' advisories.log
CVE-2026-36497: Bypassing API Sanitization in Dolibarr ERP
Blind SQL Injection in Dolibarr ERP CRM REST API.
CVE-2026-33288 & CVE-2026-33289: Double Kill in SuiteCRM
Authentication bypass via LDAPi chained with SQLi resulting in Unauthenticated RCE.
CVE-2025-67877: Unauthenticated SQL Injection in ChurchCRM
Discovered via manual code review. Resulted in full database compromise.
kilserv@~ $
index --map
- [ ABOUT ] :: Professional profile & methodology.
- [ RESEARCH ] :: Technical write-ups and PoCs.
- [ CERTS ] :: Verified qualifications.