it-sec-toolshell

ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

bsides-ahm-2022-talk

bsides-ahm-2022-talk Slide Deck of the talk I presented at Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...

certighost-cve-2026-54121-slides

Certighost Slidev deck This directory contains the Slidev presentation for CVE-2026-54121.md. npm install npm run dev Other commands: npm run build npm run export The source deck is slides.md. Deck-wide styling is in style.css, and Mermaid settings are in setup/mermaid.ts...

cve-2019-18634

cve-2019-18634 The analysis of the above CVE was my project for one of my school modules. For the full analysis please refer to the slide deck in this repo...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...

CVE-2026-77170

A flaw was found in Deck. Authenticated users can exploit a vulnerability in the Deck config API to set configuration keys for any board, even those they do not own or have permission to manage. This improper access control allows an attacker to perform unauthorized modifications to board...

CLEANSTART-2024-WQ64584 Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud

Security vulnerability affects the nextcloud-client package. Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud...

CVE-2026-61546

AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, ankimcpserver/mcpserver.py globally disables FastMCP DNS-rebinding protection through TransportSecuritySettings with...

CVE-2026-61546

AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, "ankimcpserver/mcpserver.py" globally disables FastMCP DNS-rebinding protection through "TransportSecuritySettings" with...

EUVD-2026-112504

AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, ankimcpserver/mcpserver.py globally disables FastMCP DNS-rebinding protection through TransportSecuritySettings with...

PT-2026-129211

Name of the Vulnerable Software and Affected Versions AnkiMCP versions prior to 0.21.0 Description AnkiMCP globally disables DNS-rebinding protection in anki mcp server/mcp server.py via TransportSecuritySettings by setting enable dns rebinding protection=False. This affects the default local...

FreeBSD : anki -- page manipulation via deck description links (e1e332d7-cbe2-11f1-8d05-74563cf85f9d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e1e332d7-cbe2-11f1-8d05-74563cf85f9d advisory. Anki developers report: Security: Prevent external links in deck descriptions rendered in the...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fix oops due to non-matching drmsched init/fini Currently, amdgpu calls drmschedfini from the fence driver’s sw fini routine — this function is expected to be invoked only after the corresponding init function,...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...