Skip to main content

Insecure Deserialization

Insecure Deserialization notes migrated from GitBook.

📄️ index

Insecure Deserialization

📄️ cve-2013-0156-rails-object-injection

CVE-2013-0156: Rails Object Injection

📄️ java-objectinputstream-deserialization-readobject

Java ObjectInputStream Deserialization (readObject)

📄️ php

PHP

📄️ python

Python

📄️ ruby-2.x-universal-rce-marshal-deserialization

Ruby 2.x Universal RCE: Marshal Deserialization

📄️ xmldecoder-deserialization

XMLDecoder Deserialization

📄️ xstream-vulnerability-in-jenkins-cve-2016-0792

Xstream Vulnerability in Jenkins (CVE-2016-0792)