flawme
Security Researcher

Finding web vulnerabilities...
one bug at a time.

Security Research

A collection of high-impact vulnerability research and disclosures.

Sarvam AI
High

Sarvam-105B Security Assessment: Identity Fragility

LLM Security

Disclosed a vulnerability chain where standard API usage patterns caused the Sarvam-105B model to revert to competitor identities, alongside a side-channel reasoning leak.

Unico IDtech
Critical

Critical Liveness Bypass & Admin Takeover

Auth Bypass

Discovered a critical vulnerability chain allowing unauthenticated bypass of biometric liveness detection and moderator takeover of private video conference rooms.

CLEAR
High

Administrative Identity Flow & 2FA Bypass Chain

2FA Bypass

Exploited a breakdown in environment isolation to bypass 2FA via a hardcoded staging secret, enabling extraction of unmasked Highly Sensitive PII.

View All Research →