mnemonic (2018, 2019, 2020) - code revision EVA
NSM (2018, 2019, 2020) - penetration test EVA
Vegar Linge Haaland @ Netsecurity (2019) - responsible disclosure
Fredrik Ravne @ Oslo Børs (2019) - web server vulnerability and config deviations
Rbcafe (2019) - XSS vulnerability
Kathan Patel @KathanP19 (2020) - elmah(.)axd configuration
Siddharth Dushantha @sdushantha (2021) - Broken link hijacking vulnerability