Medium

Flatt Security Inc.

Pinned

Flatt Security Inc.

·

Jun 21, 2021

CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring.

Hello, I’m Shiga( @Ga_ryo_ ), a security engineer at Flatt Security Inc.

CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring.

Flatt Security Inc.

·

Mar 25, 2022

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

How I found various vulnerabilities and chained some of the vulnerabilities into an unauthenticated command execution in NETGEAR WAC124.

Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Flatt Security Inc.

·

Feb 21, 2022

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in mysqljs/mysql

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

Flatt Security Inc.

·

Jun 21, 2021

CVE-2020–15702 Race Condition vulnerability in handling of PID by apport

Note) It’s just an English version of previous post.

CVE-2020–15702 Race Condition vulnerability in handling of PID by apport

Flatt Security Inc.

Flatt Security Inc.

We are a cyber security company based in Tokyo, Japan. We provide security assessment services. HP: https://flatt.tech/en CVE: https://flatt.tech/cve

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech