Command
Audit PHP engine deserialization surface (unserialize, session decoders, WDDX, phar metadata, custom ce->unserialize handlers, Serializable implementers, magic-method dispatch during deserialization) for UAF via R:/r: back-references, type confusion, partial-object destruct, signed-length heap overflow, and parse…
59 4mo ago A 134 tokens
original MIT