mnemonic (2018, 2019, 2020, 2021, 2022, 2023, 2024) - code revision EVA
NSM (2018, 2019, 2020, 2021, 2022, 2023) - penetration test EVA
Vegar Linge Haaland @ Netsecurity (2019) - responsible disclosure
Fredrik Ravne @ Oslo Børs (2019) - web server vulnerability and config deviations
Rbcafe (2019) - XSS vulnerability
Kathan Patel @KathanP19 (2020) - elmah(.)axd configuration
Siddharth Dushantha @sdushantha (2021) - Broken link hijacking vulnerability
Parth Naurla (2024) - Information Disclosure, File Restriction Bypass to Stored or Blind XSS, CORS Misconfiguration, No Rate Limiting