writeups.xyz / PHP deserialization attacks and a new gadget chain in Laravel

Submitter : c2a

Date: 13 February 2024

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• PHP Pop Chain

Programs :

• Undisclosed

Authors :

• Mathieu Farrell

Link :
https://blog.quarkslab.com/php-deserialization-attacks-and-a-new-gadget-chain-in-laravel.html