Simon Bertrand

Mobile & Web Penetration Tester

Specializing in Mobile (iOS/Android), Web Security and Exploit Development.

CVE-2025-65843 - Acustica Audio - Insecure File Handling via Symlink in Aquarius Desktop macOS

CVE-2025-65841 - Acustica Audio - Account Takeover via Weak Encryption and Insecure Storage in Aquarius Desktop macOS

CVE-2025-65842 - Acustica Audio - HelperTool XPC Service Local Privilege Escalation in Aquarius Desktop on macOS

CVE-2025-55076 - Plugin Alliance - InstallationHelper XPC Service Local Privilege Escalation

CVE-2025-62686 - Plugin Alliance - InstallationHelper dylib Injection on macOS

Android - Insecure Stripe Token Handling leads to Arbitrary Card Injection

Android - Exploiting Hardcoded Cryptography in Biometric Storage

Exploiting JSON.NET Deserialization for Remote Code Execution

Mobile Hacking Lab - Cyclic Scanner

CVE-2024-3251 - Time-Based Blind SQL Injection in CLMS v1.0

Mobile Hacking Lab - IoT Connect

Mobile Hacking Lab - Guess Me

Mobile Hacking Lab - Config Editor

Mobile Hacking Lab - Document Viewer

Mobile Hacking Lab - Post Board

Mobile Hacking Lab - Secure Notes

Mobile Hacking Lab - Strings

Mobile Hacking Lab - Food Store

Exploiting SSRF in FilePond’s API