146 matches found
Conferences
컨퍼런스 컨퍼런스 발표 슬라이드: BlackHat USA 2025 8월 2-7일 Offensivecon 2025 5월 16-17일 Black Hat Asia 2025 4월 1-4일 Black hat Europe 2024 12월 9-12일 Hexacon 2024 슬라이드 10월 4-5일 Black Hat USA 2024 슬라이드 8월 3-8일 REcon 2024 슬라이드 6월 28-30일 Offensivecon 2024 5월 10-11일 Blackhat Asia 2024 4월 16-19일 Blackhat Asia 2023...
presentations
크리스토퍼 피콕의 발표 자료 연도| 주최| 발표 제목| 슬라이드| 영상 ---|---|---|---|--- 2023| BSides Tampa| 퍼플 팀 101| 슬라이드| 2022| SANS PenTest HackFest 2022| 전선에서: 퍼플 팀의 해야 할 일과 하지 말아야 할 일| 슬라이드| YouTube 2022| BSides St Petersburg| TTP 피라미드| 슬라이드| YouTube 2022| DEFCON Adversary Village| 워크숍: 에드버서리 에뮬레이션을 통한 공격과 방어| 슬라이드|...
PoC-public
PoC-public 이 저장소는 다양한 보안 컨퍼런스에서 공개한 PoC 코드를 모아둔 것입니다. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is here. I'm speaking online via Zoom at a League of Women Voters event on Tuesday, September 22, 2026, at...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the users process of the admin organization interface when untrusted input from params:term is interpolated directly into SQL ORDER BY expressions before sanitization. An attacker can execute arbitrary SQL expressions...
CVE-2026-4219
A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affected by this vulnerability is an unknown functionality of the file com/index/event/BuildConfig.java of the component ae.index.apgcs. Executing a manipulation of the argument...
CVE-2026-4219: Use of Hard-coded Credentials
A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affected by this vulnerability is an unknown functionality of the file com/index/event/BuildConfig.java of the component ae.index.apgcs. Executing a manipulation of the argument...
INDEX Conferences and Exhibitions Organization YWF BPOF APGCS App 安全漏洞
INDEX Conferences and Exhibitions Organization YWF BPOF APGCS App is an application for organizing conferences and exhibitions. Versions of INDEX Conferences and Exhibitions Organization YWF BPOF APGCS App prior to 1.0.2 have security vulnerabilities. These vulnerabilities stem from improper...
CVE-2026-22800
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
CVE-2026-22800
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
CVE-2026-22800 PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
CVE-2026-22800 PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
CVE-2026-22800 PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
CVE-2026-22800
PILOS (Platform for Interactive Live-Online Seminars) before version 4.10.0 contains a CSRF vulnerability in an administrative GET endpoint that terminates all active video conferences on a single BigBlueButton server. Although authorization checks exist, the use of GET allows implicit invocation...
PT-2026-2312
Name of the Vulnerable Software and Affected Versions PILOS versions prior to 4.10.0 Description PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. A Cross-Site Request Forgery CSRF issue exists in an administrative API endpoint responsible for terminating all...
CVE-2026-22800: Cross-Site Request Forgery (CSRF)
PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery CSRF vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs ...
PILOS 跨站请求伪造漏洞
PILOS is an open source front-end software from THM. A cross-site request forgery vulnerability exists in PILOS versions prior to 4.10.0, which stems from a cross-site request forgery in the management API endpoint that could result in termination of all active video conferences...
CVE-2025-23969
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Retrieve Embedded Sensitive Data.This issue affects KI Live Video Conferences: from n/a through = 5.5.15...
