pwnfest2016

pwnfest2016 pwnfest2016で使用されたcve-2016-9651の完全なエクスプロイト、syscan360 2017のスライドと全文...

it-sec-toolshell

ToolShell — SharePoint ゼロデイプレゼンテーション CVE-2025-53770 に関する Marp スライドデッキです。各スライドは slides/ 配下の個別ファイルに保管されます。 ビルド root@kitploit: ./build.sh スライドを presentation.md にまとめる ./build.sh html + presentation.html をレンダリング ./build.sh pdf + presentation.pdf をレンダリング ./build.sh all + 各スライドの HTML、PDF、PNG プレビュー...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

x18-leak

x18-leak =================================================================================================== iOS 11.2 では、kASLR スライドを特定するために利用できるカーネル情報漏洩が導入されました。この問題は、新しく追加された機能 ARMKERNELPROTECT が原因で、threadgetstate を使用してスレッドのレジスタ値を取得する際に、カーネル関数 Lel0synchronousvector64long のアドレスが誤ってレジスタ x18...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 我的 DEFCON30 Cloud Village KQL Kung Fu Workshop 幻灯片存放在这里：DEFCON30-KQL-Kung-Fu.pdf 如果你想练习 KQL 技能，可以访问这个由 Microsoft 维护、包含大量日志数据的 Log Analytics 工作区：aka.ms/lademo...

bsides-ahm-2022-talk

bsides-ahm-2022-talk Le slide dell'intervento che ho presentato al Bsides Ahmedabad 2022 https://docs.google.com/presentation/d/1g8-rCLmPq5RasMPUGAJA2n46bybjuCLI/edit?usp=sharing&ouid=112861405653478509668&rtpof=true&sd=true...

hackspacecon-2023

HackSpaceCon Workshop- & Vortragsfolien Ich habe alle Slide-Decks von HackSpaceCon erfasst, die ich bekommen konnte. Falls du Zugang zu einigen hattest, die ich nicht aufgenommen habe, füge sie bitte per Pull Request hinzu! Vielen Dank!...

DirtySlide

DirtySlide LPE macOS: da non privilegiato → root. Una lettura/scrittura OOB di 8 byte in memoria del kernel adiacente a una pagina della shared-cache di dyld, causata da un controllo dei limiti in-page mancante nel v5 slide walk vmsharedregionslidepagev5, raggiungibile tramite la syscall 536...

CVE-2023-38408

CVE-2023-38408 Slide e codice sorgente per la presentazione dell'attacco CS-782...

cve-2019-18634

cve-2019-18634 Die Analyse der oben genannten CVE war mein Projekt für eines meiner Schulmodule. Für die vollständige Analyse verweise ich auf die Folienpräsentation in diesem Repository...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

PYSEC-2026-2892 PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. CodeExecutor.executeactions pptagent/apis.py:126-205 processes LLM-generated slide editing actions using Python's eval: python pptagent/apis.py:184-186 partialfunc =...

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are...

[SECURITY] Fedora 44 Update: openslide-4.0.0-14.fc44

The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...

[SECURITY] Fedora 43 Update: openslide-4.0.0-14.fc43

The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...

CVE-2026-7596

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may ...

Summarize contains a path traversal vulnerability

Summarize prior to 0.15.0 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary directories by supplying an absolute path or directory traversal sequence in the slidesDir request parameter. Attackers can exploit...

CVE-2026-45242

The CVE-2026-45242 vulnerability affects the Summarize tool prior to version 0.15.1, exposing a path traversal flaw in the /v1/summarize daemon endpoint. An authenticated user can supply an absolute path or directory traversal sequence in the slidesDir parameter, allowing writes of slide_*.png an...