DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 Мои слайды мастер-класса KQL Kung Fu на DEFCON30 Cloud Village находятся здесь: DEFCON30-KQL-Kung-Fu.pdf Если вы хотите попрактиковаться в навыках KQL, посетите это рабочее пространство Log Analytics, которое поддерживается Microsoft и содержит огромное количество лог-данных...

phone-deck

phone-deck Превратите запасной телефон на Android или любое устройство с браузером в собственный пульт управления и удаленный рабочий стол для вашей Linux-рабочей станции — через вашу частную сеть Tailscale, без сторонних приложений. Это началось с вопроса «что мне делать со старым телефоном?» и...

bsides-ahm-2022-talk

bsides-ahm-2022-talk Слайды доклада, который я представил на Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

it-sec-toolshell

ToolShell — презентация о zero-day уязвимости SharePoint Слайд-колода Marp об CVE-2025-53770, каждый слайд хранится в отдельном файле в каталоге slides/. Сборка ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf...

cve-2019-18634

cve-2019-18634 Анализ вышеуказанного CVE был моим проектом для одного из моих школьных модулей. Полный анализ смотрите в слайд-деке в этом репозитории...

certighost-cve-2026-54121-slides

Презентация Slidev для Certighost Этот каталог содержит презентацию Slidev для CVE-2026-54121.md. npm install npm run dev Другие команды: npm run build npm run export Исходная презентация — slides.md. Стили всей презентации находятся в style.css, а настройки Mermaid — в setup/mermaid.ts...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

EUVD-2026-82620

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

CVE-2026-77170

CVE-2026-77170 affects the Deck config API , where an insufficient authorization check allows any authenticated user to set board-scoped configuration keys for arbitrary board IDs without verifying ownership or management permission over the referenced board. The impact is rated MEDIUM (CVSS 3.0:...

CVE-2026-77170: Improper Access Control

The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage the referenced board...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fixed an oops due to incorrect drmsched init/fini calls. Currently, amdgpu calls drmschedfini from the fence driver’s fini routine. Such a call is expected to occur only after the respective init function,...

PT-2026-88953

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authenticated administrator can exploit a path traversal issue via the '/api/riff/removeRiffDeck' endpoint. The system fails to properly validate the deckID parameter, allowing the use of path...

UBUNTU-CVE-2026-64677

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Added support for Van Gogh SoC. The ROG Xbox Ally non-X SoC features an architecture similar to the Steam Deck. While the Steam Deck supports S3 mode s2idle causes a crash, this feature was removed from the...

Nextcloud: Arbitrary Board Preference Injection via Deck Config API

A vulnerability was discovered in the Deck Config API of the Nextcloud application that allowed authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating the user's ownership or permission to manage the referenced board...