TecSecurity Vulnerability Research

Offensive security research · Melbourne, AU

We break complex software.
Then prove the impact.

Vulnerability research and exploit development targeting the software people, businesses, and critical systems depend on.

Explore disclosures Read technical research
  • Enterprise
  • ICS / SCADA
  • IoT
  • File formats
341Published advisories
19Public exploits
300+RCE cases reported
18+Years publishing

Research practice

From attack surface
to working exploit.

We combine manual reverse engineering, purpose-built automation, and exploit engineering to turn subtle implementation flaws into clear, reproducible security impact.

01 / MAP

Reverse

Deconstruct proprietary software, protocols, parsers, and trust boundaries.

02 / FIND

Discover

Use targeted tooling and manual review to surface high-impact flaws.

03 / PROVE

Weaponise

Turn primitives into reliable proof-of-concept exploits and full chains.

04 / DELIVER

Deliver

Provide verified capability to trusted clients, or coordinate disclosure and publication when appropriate.

Field notes

Selected research

View all research

Disclosure feed

Recently published

Search 341 advisories
CVE-2026-25654 Siemens Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability 8.8 CVE-2026-32860 NI NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 CVE-2026-32861 NI NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 CVE-2026-0957 Digilent Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 CVE-2026-0956 Digilent Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 CVE-2026-0955 Digilent Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8

Research track record

Most Prolific Researcher.
Built on repeatable results.

Recipient of the 2025 ZDI Vanguard Award, recognising more than 300 remote code execution vulnerabilities reported through the Zero Day Initiative.

Read the story

Research & engagements

Have a difficult target?

For vulnerability research, exploit development, R&D projects, or tailored offensive security requirements.

rocco@tecsecurity.io