nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

ekoparty

EKOPARTY MIAMI Overview Slides and materials for EKOPARTY Miami. Youtube Link: https://youtu.be/FdvrwQH7LYU?si=MVD8NMykO39dP0v9 Google video links are embedded within the PDF...

My-Presentation-Slides

My-Presentation-Slides Orange Tsai's public presentation slides. You can find me at: Blog: https://blog.orange.tw/ Mail: [email protected] Twitter: @orange8361 2026 The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only! Hexacon ↖乂古法挖洞乂↘ 純邏輯 Microsoft Edge...

congresos-slides

congresos-slides Conference presentations...

Recon2023

Recon 2023 slides and code...

OBO

OB1 Off-By-One Slides from OB1 Conferences Watch all the talks Year ↓| Slides| Youtube playlist ---|---|--- 2024| Slides for Day 1| Day 1 - OB1 2024 Online Presentations 2024| Slides for Day 2| Day 2 - OB1 2024 Online Presentations 2025| Slides for Day 1| Day 1 - OB1 2025 Online Presentations 202...

Conferences

Conferences Conference presentation slides: BlackHat USA 2025 August 2-7 Offensivecon 2025 May 16-17 Black Hat Asia 2025 1-4 April Black hat Europe 2024 9-12 December Hexacon 2024 Slides 4-5 October Black Hat USA 2024 slides 3-8 August REcon 2024 Slides 28-30 Jun Offensivecon 2024 May 10-11...

My-Presentation-Slides

My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: GHSA-76H8-W3PX-47HX...

Malicious code in md-to-slides (PyPI)

Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...

slides

HyperDbg Slides Presentation slides from talks and research on HyperDbg. Slides by Year 2022 2023 2024 2025 2026...

MAL-2026-18428 Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-18426...

HSC24RedTeamInfra

HSC24RedTeamInfra Slides and Codes used for the workshop Red Team Infrastructure Automation...

Talks

Talks Slides of my public talks...

DRUPAL-CONTRIB-2026-228

The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would need a role with permission to...

CVE-2026-104077

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the...

CVE-2026-104077 Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the...