Vulnerabilities
Detect PHP Object Injection: Logs, Tools and Blind Spots
Object injection hides in serialised data streams, bypassing input filters that target only string-based injection flaws like cross-site scripting (XSS).
object injection
Everything Firewall Pulse has reported about object injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Convex Plugin Deserialization Vulnerability Enables Remote Object Injection on WordPress Sites
Deserialization of untrusted data in the Convex plugin exposes WordPress sites to remote object injection attacks requiring immediate attention.