Vulnerabilities
PHP Object Injection: Exploitation, Mitigation and Code Audit
Deserialisation of untrusted data allows attackers to execute arbitrary code by triggering magic methods during object reconstruction in PHP applications.
object injection
Everything RedTeam Log has reported about object injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Prototype Pollution Myths: Why Standard Defences Fail
Prototype pollution alters object behaviour at runtime, bypassing static checks and standard input validation without triggering typical injection alerts.