Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeRemote for Slides
Findings · 3
MEDIUM FINDINGS · 3
  1. 01Slide metadata (title, current slide, speaker notes) transmitted to shared Firebase Realtime Database when remote session is active
  2. 02Session data including slide title and speaker notes accessible to anyone who guesses the 6-digit session code on the shared Firebase database
  3. 03External message handler accepts commands from any *.limhenry.xyz origin without validating message content beyond a string check
OTHER EXTENSIONS

Is Remote for Slides safe?

Medium risk

No summary available.

Henry Limv3.0.2Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Updated 30 May 2026pojijacppbhikhkmegdoechbfiiibppi

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact