Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format (opens in new tab)

(nullcathedral.com)

1 pointsnullcathedral3mo ago1 comments

1 comments

1 comments · 1 top-level

This was one of my most frustrating disclosures, feedback on the process is very welcome :)

j / k navigate · click thread line to collapse