RedTeam Pentesting - Blog - Insecure Deserialization - How to Trace Down a Gadget Chain
May 5, 2023 at 9:53:24 AM UTC - permalink -

- https://blog.redteam-pentesting.de/2021/deserialization-gadget-chain/

PHP Supply Chain Attack on Composer
August 19, 2021 at 1:52:02 PM UTC - permalink -

- https://blog.sonarsource.com/php-supply-chain-attack-on-composer

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) | PortSwigger Research
June 29, 2021 at 1:03:41 PM UTC - permalink -

- https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464