// Open to opportunities
Offensive Security Engineer with 5+ years of experience identifying and mitigating security vulnerabilities. 4x CVE publisher, CTF champion across MENA and global competitions. Passionate about breaking things to make them stronger.
CTF 1st Places
Years Experience
CVEs Published
Certifications
// About Me
$ whoami
alaaeddine.knani
$ cat role.txt
Offensive Security Engineer @ ODDO BHF
Cybersecurity Consultant (Freelance)
$ cat location.txt
Tunis, Tunisia
$ echo $LANGUAGES
Arabic (Native) | English (Bilingual) | French (Bilingual)
$ cat education.txt
B.Eng Network Security - Tek-Up University
B.Sc Computer Networks - ISITCom Sousse
I'm a cybersecurity professional with a deep passion for offensive security, vulnerability research, and competitive hacking. I've spent years dissecting systems at ODDO BHF while dominating CTF competitions across the MENA region.
My work spans proactive vulnerability management, secure code review, SIEM deployment aligned with ISO 27001, and cyber threat intelligence. As a freelance consultant, I investigate cyber threats and build resilient defense strategies.
// Experience
ODDO BHF — Tunis, Tunisia
Freelance — Remote
// Arsenal
// Hall of Fame
Competing and winning across international cybersecurity competitions
2024 — Abu Dhabi
2025
2024
2023 — Arab ICT Organization
2022 — Qualified to Dubai
2020 — Qualified to Egypt
2020
2020
// Security Research
Vulnerabilities responsibly disclosed and assigned CVE identifiers
| CVE ID | Vulnerability | CVSS | Date |
|---|---|---|---|
| CVE-2026-1512 | Essential Addons for Elementor <= 6.5.9 — Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget | 6.4 | Feb 13, 2026 |
| CVE-2026-1271 | ProfileGrid <= 5.9.7.2 — Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification | 5.3 | Feb 4, 2026 |
| CVE-2026-1210 | Happy Addons for Elementor <= 3.20.7 — Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field | 6.4 | Feb 2, 2026 |
| CVE-2025-68999 | Happy Addons for Elementor <= 3.20.4 — Authenticated (Contributor+) SQL Injection | 8.5 | Jan 23, 2026 |
// Credentials
The SecOps Group • #10991584
February 2026
The SecOps Group • #10962757
February 2026
The SecOps Group • #10857491
December 2025
INE Security • #144374037
May 2025
PECB • ISPI1139769-2023-12
December 2023
INE • #3a79731b
April 2023
// Get in Touch
Open to security consulting, CTF collaborations, and new opportunities