Vulnerabilities
Insecure Deserialization Explained: How Broken Data Becomes Code
Attackers manipulate saved data structures to execute commands on your server, bypassing standard input filters and authentication checks entirely.
object injection
Everything TechSec Observer has reported about object injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
NVD Assigns 9.8 Score to ThemeREX Dwell Deserialization Weakness Enabling Object Injection
A deserialization weakness in ThemeREX Group Dwell allows object injection, rated 9.8 CVSS by the NVD for versions through 1.16.0.
Vulnerabilities
Prototype Pollution Incident Response and Recovery Steps
Prototype pollution alters object behaviour silently, meaning standard input validation often fails to detect the malicious payload until it executes in memory.