Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format (nullcathedral.com)

1 points by nullcathedral 7mo ago ↗ HN

1 comment

[ 6.4 ms ] story [ 24.4 ms ] thread

This was one of my most frustrating disclosures, feedback on the process is very welcome :)