Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format (nullcathedral.com)

1 points by nullcathedral 3mo ago ↗ HN

1 comment

[ 0.18 ms ] story [ 16.0 ms ] thread

This was one of my most frustrating disclosures, feedback on the process is very welcome :)