Posts

Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit

BatBadBut: You can't securely execute commands on Windows

Bypassing DOMPurify with good old XML

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring