I'm naoyashiga, a software engineer based in Tokyo, Japan. I run a popular tech-focused YouTube and TikTok channel called "Naoya Tech," where I've built a community of over 90,000 subscribers. Beyond my professional work, I have a deep interest in web security and spend my weekends bug hunting to help make the web a safer place.

YouTubeのPR案件依頼は About をご確認ください。

Security Research

I find and report vulnerabilities in open-source software. My reports have been credited with 3 CVEs in the GitHub Advisory Database.

CVEs credited

3

Highest CVSS (critical)

9.0

OSS projects

3

• CVE-2026-46547 medium 6.1

  NocoDB

  Reflected XSS via redirect URL

  Published 21 May, 2026 GHSA-9qgr-6vpg-9gh9

• CVE-2026-27822 critical 9.0

  RustFS

  Stored XSS leading to admin account takeover

  Published 25 Feb, 2026 GHSA-v9fg-3cr2-277j

• CVE-2026-27480 medium 5.3

  Static Web Server

  Timing-based username enumeration

  Published 20 Feb, 2026 GHSA-qhp6-635j-x7r2

Recent Videos

• 10:46

  Should GMO Pay the Ransom? A History of Ransomware and Real Cases

  25 Oct, 2026

  Security
• 9:02

  php2shell Was Just the Beginning: OpenAI's Patch the Planet Explained

  24 Oct, 2026

  Security
• 15:36

  How Vite Works: Why It's So Fast, and How It Came to Be

  21 Oct, 2026

  Frontend
• 17:24

  How Grok Bot Works: The Architecture of an Always-On AI Agent

  17 Oct, 2026

  AI