Unveiling Remote Code Execution: How Vulnerabilities Lead to System Takeovers

on YouTube ↗28m

" summary

Walks through three real CVEs with code-level detail and a demo showing exploit chains and fixes: CVE-2024-47076 (cups-filters) lets a malicious print server send crafted responses over UDP port 631 to trigger code execution, rated CVSS 9.9 and able to spawn reverse shells; CVE-2024-6345 (python-setuptools) executes arbitrary code during pip installs by accepting unsanitized package URLs; CVE-2024-32002 (git) runs code during git clone from crafted repos, demo includes exploit scripts, mitigation steps, and patch timelines.

AI-written summary · about

" chapters (15)

1. 0:00Remote code execution threats
2. 2:05Hollywood myths vs real attackers
3. 4:40What makes remote code execution dangerous
4. 6:07Python setup tools vulnerabilities
5. 7:30Git repo exploitation risks
6. 8:34CUPS printing system flaw
7. 11:05Live CUPS exploit demo
8. 15:31Why the CUPS vulnerability remained exploitable
9. 18:26Log4j shell vulnerability
10. 19:29EternalBlue ransomware impact
11. 20:30Cyberattack costs and scale
12. 22:01Legacy systems vs security updates
13. 24:08Open source risks and duties
14. 26:25USB rubber ducky attacks
15. 27:56Q&A on security policies

" related talks

• 01h 02mPrompt-Jacking: The Rise of a New Supply Chain RiskKasimir Schulz, Kenneth Yeung · NDC Toronto 2026
• 56mModern Web Vulnerabilities 2020Erlend Oftedal · NDC Security Oslo 2020
• 01h 01mHow hacking works - Web editionEspen Sande-Larsen · NDC Oslo 2023
• 36mExploiting Vulnerabilities and Flaws to Attack Supply ChainYakir Kadkoda, Ilay Goldman · RSA Conference 2023
• 55mHow hacking worksEspen Sande-Larsen · NDC Security 2023
• 47mToolShell, Patch Bypass, and the AI That Might Have Seen It ComingPedram Hayati, Soroush Dalili · NDC Manchester 2025
• 44mCritical Zero Days Remotely Compromise the Most Popular Real-Time OSBen Seri, Dor Zusman · Black Hat USA 2019
• 01h 06mHow hacking worksEspen Sande-Larsen · NDC TechTown 2023