Flatt Security Research

Flatt Security Research

An official blog of Flatt Security Inc. based in Tokyo, Japan. We are striving harder to improve the cybersecurity for the local and global community. We strongly believe that identifying and eradicating cyber weaknesses on products will eventually make the internet a much safer medium to communicate and utilize.

BatBadBut: You can't securely execute commands on Windows
Apr 9, 24
BatBadBut: You can't securely execute commands on Windows
Bypassing DOMPurify with good old XML
Apr 1, 24
Bypassing DOMPurify with good old XML
How I could bypass DOMPurify with XML
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)
Mar 26, 22
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)
Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql
Feb 22, 22
Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql
CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring
Jun 21, 21
CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring
CVE-2020–15702 Race Condition vulnerability in handling of PID by apport
Jun 21, 21
CVE-2020–15702 Race Condition vulnerability in handling of PID by apport