View source for Maloy Roy Orko

[[File:Sophisticated Portrait in Blue.jpg|thumb|<u>Known For: Founder of Web Security Insights</u>]]
'''Maloy Roy Orko (born September 20,2007) is a cyber security researcher specializing in Web Application Security Testing. He is best known as the founder of Web Security Insights, an Online Cyber Security related platforms.''' 

== Early Life and Education ==
Maloy Roy Orko was born in Dhaka, Bangladesh He completed his Higher Secondary Certificate (HSC) at Dhaka College and is currently taking admission into university.In future,he wants to become a doctor maintaining his cyber security career as well.In future,he wants to become a doctor maintaining his cyber security career as well.

== Career ==
Maloy Roy Orko began his career in cyber security in 2019, focusing on Web Security. In 2024, he established Web Security Insights,a cyber security organization,motivated to promote cyber security among the youth and spread awareness in online.

Maloy Roy Orko maintains a robust presence on GitHub under the username Maloyroyorko. 

Maloy Roy Orko maintains a dedicated online platform, websecurityinsights.my.id, where he actively publishes his security research.

This platform primarily features vulnerability disclosures and cyber news, with frequent updates, including numerous posts in June 2025, which signifies his ongoing and active engagement in the field.

Top of All,His research encompasses a broad spectrum of common web application and system vulnerabilities, including SQL Injection (SQLi), Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), Remote Code Execution (RCE), Cross-Site Request Forgery (CSRF), Improper restriction of excessive authentication attempts, Unrestricted file uploads, and Improper access controls.

'''Beyond vulnerability disclosures,''' 

'''Maloy Roy Orko also contributes to cyber news related journalism, exemplified by his report on the "Breaking News: LockBit Ransomware Admin Panel Hacked, SQL Database Leaked".'''

== Research Works ==
'''CVE-2025-4065:''' 

'''A critical vulnerability found in ScriptAndTools Online-Travling-System 1.0, involving improper access controls (Published April 29, 2025).'''

'''<br />
CVE-2025-2036:''' 

'''Classified as critical, this SQL Injection vulnerability was identified in s-a-zhd Ecommerce-Website-using-PHP 1.0 (Published March 8, 2025)'''

'''<br />
CVE-2025-3556:''' 

'''A problematic vulnerability in ScriptAndTools eCommerce-website-in-PHP 3.0 concerning excessive authentication attempts (Published April 14, 2025).'''




'''CVE-2025-3557:''' 

'''Another problematic vulnerability in ScriptAndTools eCommerce-website-in-PHP 3.0, related to Cross-Site Request Forgery (Published April 14, 2025).'''

'''<br />
CVE-2025-0842:''' 

'''SQL Injection Admin Login Bypass in Library-Card-System (Published January 19, 2025).'''

'''<br />
CVE-2025-0722:''' 

'''Unrestricted File Upload in Image_Gallery (Published January 09, 2025).'''

'''<br />
CVE-2025-0721:''' 

'''Cross Site Scripting (Reflected XSS) in Image_Gallery (Published January 09, 2025).'''

== References ==

* https://www.websecurityinsights.my.id/p/maloy-roy-orko.html
* https://www.linkedin.com/in/maloyroyorko
* https://youtube.com/@maloyroyorko
* https://www.instagram.com/maloyroyarko/