phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...

bsides-ahm-2022-talk

bsides-ahm-2022-talk Slide Deck of the talk I presented at Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

it-sec-toolshell

ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...

cve-2019-18634

cve-2019-18634 The analysis of the above CVE was my project for one of my school modules. For the full analysis please refer to the slide deck in this repo...

certighost-cve-2026-54121-slides

Certighost Slidev deck This directory contains the Slidev presentation for CVE-2026-54121.md. npm install npm run dev Other commands: npm run build npm run export The source deck is slides.md. Deck-wide styling is in style.css, and Mermaid settings are in setup/mermaid.ts...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

EUVD-2026-82620

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

CVE-2026-77170 affects the Deck config API , where an insufficient authorization check allows any authenticated user to set board-scoped configuration keys for arbitrary board IDs without verifying ownership or management permission over the referenced board. The impact is rated MEDIUM (CVSS 3.0:...

CVE-2026-77170: Improper Access Control

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fixed an oops due to incorrect drmsched init/fini calls. Currently, amdgpu calls drmschedfini from the fence driver’s fini routine. Such a call is expected to occur only after the respective init function,...

PT-2026-88953

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authenticated administrator can exploit a path traversal issue via the '/api/riff/removeRiffDeck' endpoint. The system fails to properly validate the deckID parameter, allowing the use of path...

UBUNTU-CVE-2026-64677

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Added support for Van Gogh SoC. The ROG Xbox Ally non-X SoC features an architecture similar to the Steam Deck. While the Steam Deck supports S3 mode s2idle causes a crash, this feature was removed from the...

Nextcloud: Arbitrary Board Preference Injection via Deck Config API

A vulnerability was discovered in the Deck Config API of the Nextcloud application that allowed authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating the user's ownership or permission to manage the referenced board...