Black Hat·48 min
Engineers explore architecture and security mechanisms for A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land.
remote-code-executionmanipulationldap
remote-code-execution
45 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 45 talks · loading…
Black Hat·41 min
Engineers explore architecture and security mechanisms for How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass & more.
bypassremote-code-executiondocker
Black Hat·40 min
Engineers explore architecture and security mechanisms for Over the Air Baseband Exploit: Gaining Remote Code Execution on 5G Smartphones.
remote-code-executionbaseband5g+1
Black Hat·34 min
Security researchers examine technical aspects of Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime.
vulnerabilitiesremote-code-executionapple
Briefings·34 min
Ryan Barnett · Isabella Barnett
As web applications evolve, so do their data processing pipelines—handling Unicode normalization, encoding, and translation before storing or executing user input.
rceexploitationfuzzing+3
Briefings·26 min
Jiashuo Liang · Guancheng Li
Introduces a novel gradient-based prompt-injection technique that can generate universal triggers to manipulate open-source Large Language Model (LLM) outputs.
open-sourceaillm+3
Briefings·36 min
Qibo Shi · Victor V · Wei Xiao · Zhiniang Peng
Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services (PRE-RECORDED) The Windows operating system heavily relies on HTTP services.
windowssecurity-researchrce+3
Briefings·37 min
Ji'an Zhou · Li'shuo Song
PyTorch is a machine learning library based on the Torch library, used for applications such as computer vision and natural language processing.
cloudmachine-learningai+3
Briefings·30 min
Shahar Tal · Yarden Porat
Enterprise vaults are meant to be the last line of defense – the trusted stronghold for your organization's most sensitive assets: secrets, credentials, and encryption keys.
encryptionrceremote-code-execution+2
BSides Canberra 2025·23 min
Riley Kidd
Riley Kidd details Time Traveling Exploitation: Remote Code Execution in a 10,000 Day Old Game Protocol.
exploitationremote-code-executiontraveling+2
BSides Lisbon·19 min
Robert Kugler
Robert Kugler details [BSL2019] Pentest Deep Dive: Anatomy Of A Weaponized Remote Code Execution Flaw.
remote-code-executionbsl2019pentest+2
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
iotremote-code-executionhardware+2
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.
cctvhardwareremote-code-execution+2
Creator Stage·25 min
O. Gianatiempo · G. Aznarez
Discloses two unauthenticated remote code execution vulnerabilities in Draytek routers (CVE-2024-51138 and CVE-2024-51139) that enable full edge device takeovers.
routershardwareremote-code-execution+2
Creator Stage·20 min
Kai-Ching Wang · Chiao-Lin Yu
Examines over 50 real-world IoT vulnerability cases featuring hardcoded backdoors and discusses systemic barriers in reporting flaws to vendors and CERTs.
iotbackdoorvulnerability-disclosure+2
Ekoparty Security Conference·40 min
Evaluates #EkoTV: El bug de la semana | Remote code execution in cdnjs of cloudflare and evaluates key implications for security practitioners.
remote-code-executionekotvsemana+2
Main Stage·34 min
Ji'an Zhou · Ying Zhu · ZiYang Li
Reveals critical architectural and deserialization vulnerabilities across Apache Kafka client and server implementations, enabling remote code execution.
kafkaappsecremote-code-execution+2
Main Stage·40 min
Nassim Asrir · Zackary Flack
Discloses a pre-authentication remote code execution chain against Synology DSM, demonstrating how attackers achieve root compromise via the S2S protocol.
synologynasremote-code-execution+2
Main Stage·40 min
Matthias Fischer · Patrick Wardle
Reveals critical baseband and firmware vulnerabilities in popular cellular modems that allow remote over-the-air exploitation and device takeover.
cellularbasebandhardware+2
Main Stage·27 min
Edward Warren
Discloses multiple pre-authentication remote code execution and arbitrary SMS vulnerabilities across popular consumer and industrial 4G/5G cellular routers.
cellularroutershardware+2
Main Stage·39 min
Anna Antonenko
Demonstrates remote code execution across audio software and operating system synthesis engines by weaponizing malformed MIDI protocol messages.
midiappsecremote-code-execution+2
Main Stage·19 min
Tal Peleg · Coby Abrams
Demonstrates remote code execution on managed cloud PostgreSQL databases by exploiting memory safety vulnerabilities in untrusted procedural language extensions.
postgresqlcloudremote-code-execution+2
Main Stage·21 min
Noam Moshe
Demonstrates remote code execution and edge compromise across Axis enterprise IP cameras, turning surveillance devices into offensive pivot points.
cctvhardwareremote-code-execution+2
Main Stage·35 min
Ji'an Zhou · Lishuo Song
Discloses multiple memory corruption and deserialization vulnerabilities in PyTorch's TorchScript JIT engine that allow arbitrary remote code execution via malicious AI models.
pytorchmachine-learningremote-code-execution+2