Search talks

Black Hat · 2025black-hatadvanced

Delegate to the Top: Abusing Kerberos for Arbitrary Impersonations and RCE

Black Hat · 2025black-hatadvanced

Diving in to Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer

Zhiniang Peng · XueFeng Li · Lewis Lee

Black Hat · 2025black-hatadvanced

Exploiting Message Queue Flaws in AI Inference Servers for Widespread RCE

Avi Lumelsky · Uri Katz · Gal Elbaz

Black Hat · 2025black-hatadvanced

Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs

Infiltrating Corporate Intranet Like NSA

Black Hat · 2025black-hatadvanced

Model Files → Memory Corruption → RCE: The Triple-Stage AI Attack Chain

Ji'an Zhou · Lei Lu · Li'shuo Song

Black Hat · 2025black-hatadvanced

QuickShell: Sharing is Caring About an RCE Attack Chain on Quick Share

Or Yair · Shmuel Cohen

Black Hat · 2025black-hatadvanced

SecTor 2025 | Sharing Is Caring About an RCE Attack Chain on Quick Share

Or Yair

Black Hat · 2025black-hatadvanced

SecTor 2025 | Signature of Destruction: Outlook RCE Strikes Again

Michael Gorelik · Arnold Osipov

Black Hat · 2025black-hatadvanced

Server-Side Template Injection: RCE For The Modern Web App

Black Hat · 2025black-hatadvanced

The Illusion of Isolation: How Isolation Failures in CI/CD Servers Lead to RCE and Privacy Risks

Tian Zhou · Yiwen Wang · Xiu Zhang

Black Hat · 2025BHUSA25expert

Booting into Breaches: Hunting Windows SecureBoot's Remote Attack Surfaces

Jietao Yang

Black Hat · 2025BHUSA25advanced

Lost in Translation: Exploiting Unicode Normalization

Ryan Barnett · Isabella Barnett

Black Hat · 2025BHUSA25advanced

Turning Camera Surveillance on its Axis

Noam Moshe

Black Hat · 2025BHUSA25advanced

Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services

Qibo Shi · Victor V · Wei Xiao · Zhiniang Peng

Black Hat · 2025BHUSA25advanced

Unveiling the Hidden Perils of the TorchScript Engine in PyTorch

Ji'an Zhou · Li'shuo Song

Black Hat · 2025BHUSA25advanced

Vaulted Severance: Your Secrets Are Now Outies

Shahar Tal · Yarden Porat

Black Hat · 2025BHUSA25expert

Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices

Gal Elbaz · Avi Lumelsky · Uri Katz

CODE BLUE · 2025code-blueadvanced

[CB18] RCE with Captive Portal by Yongtao Wang, Yunfei Yang, Kunzhe Chai

Yongtao Wang · Yunfei Yang · Kunzhe Chai

CONFIDENCE · 2025confidence-2025

Or Yair - Quick Shell: Sharing is caring about an RCE attack chain on Quick Share

Or Yair

COMMUNITY · 2025crikeyconadvanced

2018 - Joshua Graham - How I learned to stop worrying and find UXSS/RCE

Joshua Graham

COMMUNITY · 2025cyber-saiyanexpert

RomHack 2019 - Orange&Chang - Infiltrating Corporate Intra Like NSA Pre-auth RCE on Leading SSL VPNs

Chang

EKOPARTY · 2025ekoparty-2025

The Missing Link: Draytek’s New RCEs Complete the Chain

Gaston AznarezOctavio Gianatiempo

EKOPARTY · 2025ekoparty-security-conferenceadvanced

Advanced server-side template exploitation with RCE everywhere -Alex Brumen

RCE everywhere -Alex Brumen

EKOPARTY · 2025ekoparty-security-conferenceadvanced

From Firmware to RCE: Attacking Hikvision NVRs

Angel Lozano Alcazar · Pedro Guillen Nuñez