Vulnerability Research

Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection

Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit

BatBadBut: You can't securely execute commands on Windows

Bypassing DOMPurify with good old XML

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql