382 matches found
DEFCON-KQL-KUNG-FU-22
DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...
DirtySlide
DirtySlide Unprivileged → root macOS LPE. An 8-byte OOB read/write into kernel memory adjacent to a dyld shared-cache page, from a missing in-page bounds check in the v5 slide walk vmsharedregionslidepagev5, reachable via syscall 536. Patched in macOS 26.5.2 25F84, xnu-12377.121.10. Vulnerable...
SlideDeck 1 Lite Content Slider - Cross-Site Scripting
SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...
x18-leak
x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...
cve-2019-18634
cve-2019-18634 The analysis of the above CVE was my project for one of my school modules. For the full analysis please refer to the slide deck in this repo...
pwnfest2016
pwnfest2016 full exploit for cve-2016-9651 used in pwnfest2016, slide and full text of syscan360 2017...
CVE-2023-38408
CVE-2023-38408 Slide and source code for CS-782 attack presentation...
bsides-ahm-2022-talk
bsides-ahm-2022-talk Slide Deck of the talk I presented at Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...
hackspacecon-2023
HackSpaceCon Workshops & Talks Slides I captured all the slide decks I could from HackSpaceCon. If you were privy to some I did not include please add via a pull request! Thank You!...
it-sec-toolshell
ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build root@kitploit: ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf...
Exploit for Improper Authorization in Microsoft
Certighost Slidev deck This directory contains the Slidev pre...
CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
CVE-2026-58487
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
PYSEC-2026-2892 PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. CodeExecutor.executeactions pptagent/apis.py:126-205 processes LLM-generated slide editing actions using Python's eval: python pptagent/apis.py:184-186 partialfunc =...
PT-2026-57912
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...
PT-2026-59529
Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. CodeExecutor.execute actions pptagent/apis.py:126-205 processes LLM-generated slide editing actions using Python's eval: python pptagent/apis.py:184-186 partial func ...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are...
