PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services

slcyber.io | research | #vulnerability-research | #deserialization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services
Published
Collected

Related coverage

research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · slcyber.io
Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire
# Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire Get research alerts Share on social October 8, 2026 9 min read ### Table of Contents TOC Element The Sequence of...
research · slcyber.io
Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)
# Why nested deserialization is harmful: Magento XXE (CVE-2024-34102) Get research alerts Share on social ) June 26, 2024 9 min read ### Table of Contents TOC Element Magento is one of the most...
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
Back