DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 Mi presentación del taller KQL Kung Fu del Cloud Village del DEFCON30 se encuentra aquí: DEFCON30-KQL-Kung-Fu.pdf Si quieres practicar tus habilidades con KQL, visita este Log Analytics Workspace, mantenido por Microsoft y repleto de datos de registro: aka.ms/lademo...

phone-deck

phone-deck Convierte un teléfono Android de repuesto o cualquier dispositivo con un navegador en una consola de control autogestionada y escritorio remoto para tu estación de trabajo Linux, a través de tu red privada de Tailscale, sin aplicaciones de terceros. Comenzó como "¿qué hago con un...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

bsides-ahm-2022-talk

bsides-ahm-2022-talk Deck de diapositivas de la charla que presenté en Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...

it-sec-toolshell

ToolShell — SharePoint 零日演示 一个关于 CVE-2025-53770 的 Marp 幻灯片集，每张幻灯片都保存在 slides/ 下的单独文件中。 构建 ./build.sh 组装幻灯片为 presentation.md ./build.sh html + 渲染 presentation.html ./build.sh pdf + 渲染 presentation.pdf ./build.sh all + HTML、PDF 以及每张幻灯片的 PNG 预览 脚本会按需使用 npx 获取 @marp-team/marp-cli — 无需全局安装。 项目布局...

cve-2019-18634

cve-2019-18634 上述CVE的分析是我一个学校模块的项目。如需完整分析，请参阅此仓库中的幻灯片。...

certighost-cve-2026-54121-slides

Certighost Slidev 演示文稿 此目录包含 CVE-2026-54121.md 的 Slidev 演示文稿。 npm install npm run dev 其他命令： npm run build npm run export 源幻灯片为 slides.md。幻灯片全局样式位于 style.css，Mermaid 设置位于 setup/mermaid.ts。...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

EUVD-2026-82620

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

CVE-2026-77170 affects the Deck config API , where an insufficient authorization check allows any authenticated user to set board-scoped configuration keys for arbitrary board IDs without verifying ownership or management permission over the referenced board. The impact is rated MEDIUM (CVSS 3.0:...

CVE-2026-77170: Improper Access Control

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fixed an oops due to incorrect drmsched init/fini calls. Currently, amdgpu calls drmschedfini from the fence driver’s fini routine. Such a call is expected to occur only after the respective init function,...

PT-2026-88953

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authenticated administrator can exploit a path traversal issue via the '/api/riff/removeRiffDeck' endpoint. The system fails to properly validate the deckID parameter, allowing the use of path...

UBUNTU-CVE-2026-64677

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Added support for Van Gogh SoC. The ROG Xbox Ally non-X SoC features an architecture similar to the Steam Deck. While the Steam Deck supports S3 mode s2idle causes a crash, this feature was removed from the...

Nextcloud: Arbitrary Board Preference Injection via Deck Config API

A vulnerability was discovered in the Deck Config API of the Nextcloud application that allowed authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating the user's ownership or permission to manage the referenced board...