Insecure Deserialization

Exploiting deserialisation of untrusted data — Java gadget chains, PHP object injection, Python pickle and YAML exploits.