writeups.xyz writeups.xyz / PHP Object Injection

Title Vulnerabilities Programs Authors
WordPress GiveWP POP to RCE (CVE-2024-5932)
$4,998 Bounty Awarded and 100,000 WordPress Sites Protected Against Unauthenticated Remote Code Execution Vulnerability Patched in GiveWP WordPress Plugin
Exploiting an N-day vBulletin PHP Object Injection Vulnerability
Pre-Auth RCE in Moodle Part I - PHP Object Injection in Shibboleth
Tales of SugarCRM Security Horrors
Type Juggling and PHP Object Injection, and SQLi, Oh My!