Flatt Security Research

An official blog of Flatt Security Inc. based in Tokyo, Japan. We are striving harder to improve the cybersecurity for the local and global community. We strongly believe that identifying and eradicating cyber weaknesses on products will eventually make the internet a much safer medium to communicate and utilize.

Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit

Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit

BatBadBut: You can't securely execute commands on Windows

BatBadBut: You can't securely execute commands on Windows

Bypassing DOMPurify with good old XML

Bypassing DOMPurify with good old XML

How I could bypass DOMPurify with XML

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring

CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring