The newest Insecure Deserialization resources are on the Insecure Deserialization page. For a reading order instead of a date order, see the Insecure Deserialization learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-04-22 2026 | Precise and Effective Gadget Chain Mining through Deserialization-Guided Call Graph Construction (USENIX Security 2025) advanced 2 min read | Tool for precise gadget chain mining using deserialization-guided call graph construction. This approach addresses limitations of existing methods by incorporating controllability analysis, hybrid dispatch techniques, and recovery of missing call edges due to reflection. Evaluated on 30 applications, it demonstrated improved recall and precision, detecting numerous new gadget chains and previously unknown exploitation methods for vulnerabilities like those related to Java deserialization. |
| 2026-04-22 2026 | Gleipner: A Benchmark for Gadget Chain Detection in Java Deserialization Vulnerabilities advanced | Gleipner: A Benchmark for Gadget Chain Detection in Java Deserialization Vulnerabilities → dl.acm.org |
| 2026-04-19 2026 | IBM webMethods Integration CVE-2025-36072: Deserialization RCE news 2 min read | Writeup of CVE-2025-36072, an unsafe deserialization vulnerability (CWE-502) in IBM webMethods Integration Server. Exploitable by authenticated users with service execution privileges, this flaw allows attackers to submit crafted serialized object graphs to trigger arbitrary code execution. Affected versions include 10.11, 10.15, and 11.1, requiring the latest core fixes to mitigate the risk. → zeropath.com |
| 2026-04-19 2026 | Deserialization Vulnerability — Exploit-DB Paper intermediate | Deserialization Vulnerability — Exploit-DB Paper → exploit-db.com |
| 2026-04-19 2026 | Cisco ISE Insecure Java Deserialization — Cisco Docs intermediate 2 min read | Advisory detailing Insecure Java Deserialization vulnerabilities in Cisco Identity Service Engine (ISE). The advisory provides information on affected software releases and the first fixed release available through standard update channels for customers with active service contracts. It also outlines procedures for customers without service contracts to obtain security fixes. |
| 2026-04-19 2026 | Insecure Deserialization Vulnerabilities — Acunetix beginner 1 min read | Reference list of web vulnerability categories, including Insecure Deserialization, SSRF, SQL Injection, XSS, XXE, and LLM-related issues like LLM Prompt Injection and LLM Sensitive Information Disclosure, with severity ratings. → acunetix.com |
| 2026-04-19 2026 | Cisco ISE Insecure Java Deserialization (CVE-2025-20124) news | Cisco ISE Insecure Java Deserialization (CVE-2025-20124) |
| 2026-04-17 2026 | CVE-2023-34040: Spring-Kafka Java Deserialization news | Library fixes CVE-2023-34040 in Spring for Apache Kafka, addressing a deserialization attack vector in exception record headers. This vulnerability requires unusual configuration, specifically the enabling of `enable.idempotent.deserializer` and the use of an `ErrorHandlingDeserializer`. Releases 3.0.10 and 2.9.11 resolve this issue. |
| 2026-04-17 2026 | Apache Struts vulnerability leads to RCE news | Apache Struts vulnerability leads to RCE |
| 2026-04-17 2026 | Jackson deserialization vulnerability exploit (3 gadgets, GitHub) intermediate 8 min read | Library for exploiting Jackson deserialization vulnerabilities. This resource contains code to reproduce exploits leveraging known gadgets, specifically focusing on the dangers of Polymorphic Type Handling when Jackson accepts untrusted JSON. It details how enabling default typing or using annotations can lead to Remote Code Execution if exploitable gadgets are present in the classpath, demonstrating with `com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl`. |
| 2026-04-17 2026 | Apache Struts2 Code Execution Exploit (Infopercept) intermediate 2 min read | Writeup detailing an Apache Struts2 remote code execution exploit. The vulnerability, present in versions 2.1.2 to 2.3.x (prior to 2.3.34) and 2.5.x (prior to 2.5.13), stems from insecure deserialization via the Rest Plugin's XStream handler. Attackers can leverage specially crafted XML POST requests to execute system commands. The writeup covers setup with vulnerable servers like Pentester Lab or Metasploitable 3, and exploitation using Metasploit's `struts2_rest_xstream` module or a Python script. |
| 2026-04-17 2026 | Spring-web Java Deserialization: CVE-2016-1000027 (Contrast) news | Spring-web Java Deserialization: CVE-2016-1000027 (Contrast) |
| 2026-04-17 2026 | Exploiting Apache Struts: Writing Better Detections (Gigamon) intermediate 5 min read | Writeup analyzing detection bypasses for Apache Struts vulnerabilities CVE-2017-5638, CVE-2017-9791, and CVE-2017-9805. It demonstrates how focusing on implementation details of exploits, rather than the underlying Java deserialization and Property-Oriented Programming (POP) chain mechanics of CVE-2017-9805, leads to easily evadable detections. The analysis highlights specific POP gadget class paths, both strict and loose, that can be used to create more robust and attack-class-aware detection logic. |
| 2026-04-17 2026 | Friday the 13th JSON Attacks (Black Hat) advanced | Friday the 13th JSON Attacks (Black Hat) → blackhat.com |
| 2026-04-17 2026 | PayloadsAllTheThings: Insecure Deserialization DotNET intermediate 4 min read | Library for exploiting insecure deserialization vulnerabilities in .NET applications. It details how various .NET formatters like BinaryFormatter, Json.Net, XmlSerializer, and NetDataContractSerializer can be abused. The library references tools such as `ysoserial.net` and `ysonet` for generating malicious payloads, and highlights specific gadgets like `ObjectDataProvider` and `ExpandedWrapper` used in exploit chains. It also links to several research papers and presentations on .NET deserialization attacks, including work by James Forshaw and Alvaro Muñoz. |
| 2026-04-17 2026 | Basic .Net deserialization ObjectDataProvider gadget (HackTricks) intermediate | Basic .Net deserialization ObjectDataProvider gadget (HackTricks) → book.hacktricks.xyz |
| 2026-04-17 2026 | Python-Pickle-RCE-Exploit + vulnerable Flask App (GitHub) intermediate | Library for demonstrating and exploiting Remote Code Execution (RCE) vulnerabilities via Python's pickle module. Includes a vulnerable Flask application and PoC scripts for executing arbitrary code by serializing and deserializing malicious objects. Useful for understanding pickle deserialization risks and testing applications that handle untrusted pickle data. |
| 2026-04-17 2026 | SOUR PICKLE: Insecure Deserialization with Python Pickle beginner | SOUR PICKLE: Insecure Deserialization with Python Pickle |
| 2026-04-17 2026 | PayloadsAllTheThings: Insecure Deserialization Python intermediate 2 min read | Library for understanding Python insecure deserialization vulnerabilities, focusing on the pickle and YAML modules. It details vulnerable sinks like `cPickle.loads` and `yaml.unsafe_load`, providing example payloads for Remote Code Execution (RCE) via `pickle` and `os.system` through YAML tags like `!!python/object/apply:os.system`. The entry also references CVE-2019-20477 and techniques for code injection, error-based, and time-based RCE. |
| 2026-04-17 2026 | Python-socketio: Pickle deserialization RCE advisory news 1 min read | Advisory for python-socketio GHSA-g8c6-8fjj-2r4m details arbitrary Python code execution (RCE) via malicious pickle deserialization in multi-server deployments. Attackers with access to the message queue can send crafted pickle payloads, exploiting `pickle.loads()` and Python's `__reduce__` method to execute arbitrary code with the server's privileges. Versions prior to 5.14.0 are affected; upgrading to 5.14.0+ resolves this by using JSON encoding instead of pickle. |
| 2026-04-17 2026 | Exploiting deserialization in recent Java versions (OWASP Stuttgart) intermediate | Exploiting deserialization in recent Java versions (OWASP Stuttgart) → owasp.org |
| 2026-04-17 2026 | Automated Discovery of Deserialization Gadget Chains (Black Hat) advanced | Automated Discovery of Deserialization Gadget Chains (Black Hat) |
| 2026-04-17 2026 | Prevent insecure deserialization attacks (Veracode) beginner 3 min read | Library on preventing insecure deserialization, an OWASP Top Ten vulnerability enabling attacks like RCE, SQL injection, and path traversal. It details threat vectors, attack examples using tools like Java Serial Killer and manipulated PHP object serialization, and mitigation strategies including avoiding untrusted input, utilizing JSON, digital signatures, and running deserialization in low-privilege environments. The resource also covers manual and dynamic testing approaches. |
| 2026-04-17 2026 | Understanding Insecure Deserialization: Risks and Mitigations beginner | Understanding Insecure Deserialization: Risks and Mitigations |
| 2026-04-17 2026 | Bug Bounty Hunting: Insecure Deserialization beginner | Bug Bounty Hunting: Insecure Deserialization |
| 2026-04-16 2026 | Depickling, Gadgets, and Chains: The Exploit That Unraveled Equifax advanced 3 min read | Reference on deserialization vulnerabilities, detailing how the Equifax breach stemmed from CVE-2017-5638 in Apache Struts. It explains the "gadget" and "chain" exploitation technique, drawing parallels to concepts from the "Marshalling Pickles" talk by Lawrence and Frohoff, and referencing CVE-2013-0156 in Rails. The entry highlights the dangers of unchecked input in serialization mechanisms leading to arbitrary code execution. |
| 2026-04-16 2026 | How to Exploit PHAR Deserialization Vulnerability intermediate 7 min read | Library for PHP deserialization vulnerabilities, focusing on PHAR archives. It details how the `phar://` stream wrapper can automatically deserialize PHAR file metadata, enabling Property Oriented Programming (POP) attacks. The resource explains POP attacks, including the role of magic methods like `__destruct()`, and provides a proof-of-concept exploit demonstrating code execution via a crafted PHAR archive with a malicious object in its metadata. |
| 2026-04-16 2026 | Insecure Reflection Practices in Java and C# intermediate 6 min read | Library detailing insecure reflection practices in Java and C# applications, outlining vulnerabilities like remote code execution and privilege escalation that arise from unchecked dynamic class loading and type resolution. It emphasizes proactive mitigation strategies, including class whitelisting and securing deserialization pathways, and highlights real-world impacts through case studies like CVE-2025-53770 in SharePoint, demonstrating how reflection is exploited during deserialization, often facilitated by tools like ysoserial. |
| 2026-04-16 2026 | Java Deserialization Tricks - Synacktiv advanced 21 min read | Library of techniques for evading WAFs and EDRs during Java deserialization exploitation. This library focuses on stealthy RCE, demonstrating how to bypass pattern detection by renaming packages and modifying gadget chains, as well as utilizing the Translet API to inject custom Java code at runtime. It provides methods to avoid detection from common security solutions like WAFs and EDRs by obfuscating strings and injecting bytecode, offering alternatives to direct command execution. |
| 2026-04-16 2026 | Deep Dive into .NET ViewState Deserialization advanced | Deep Dive into .NET ViewState Deserialization |
| 2026-04-16 2026 | ViewState Deserialization Zero-Day in Sitecore (CVE-2025-53690) news 11 min read | Writeup of CVE-2025-53690, a ViewState deserialization zero-day impacting Sitecore deployments. Mandiant's investigation revealed attackers exploiting an exposed sample machine key to achieve remote code execution. Post-exploitation involved WEEPSTEEL reconnaissance, archiving sensitive files like `web.config`, and using tools such as EARTHWORM, DWAGENT, and SHARPHOUND for network tunneling, remote access, and Active Directory enumeration, culminating in privilege escalation and lateral movement via RDP. → cloud.google.com |
| 2026-04-16 2026 | The Art of Hide and Seek: Pickle-Based Model Supply Chain Poisoning advanced 47 min read | Library for detecting and bypassing pickle-based model supply chain poisoning in Python AI/ML frameworks. It systematically discloses the poisoning surface across model loading paths and risky functions, identifying 22 overlooked loading paths and 133 exploitable gadgets. The research also introduces Exception-Oriented Programming (EOP) to bypass scanners, demonstrating robust vulnerabilities missed by current detection solutions like PickleScan and ModelScan, and leading to a $6000 bug bounty. → arxiv.org |
| 2026-04-10 2026 | Insecure Deserialization: Risks, Examples, and Best Practices beginner 1 min read | Library covering insecure deserialization, a vulnerability allowing attackers to inject malicious code by manipulating untrusted serialized data. Exploits can lead to remote code execution, privilege escalation, or denial-of-service attacks. Best practices include strict input validation, using secure serialization libraries, implementing cryptographic integrity checks, and app shielding to protect against tampering. |
| 2026-04-10 2026 | Deserialization Gadget Chain Definition beginner | Library defines Deserialization Gadget Chains, a technique exploiting insecure deserialization by chaining existing application code fragments to achieve remote code execution. Unlike injecting new code, this method abuses legitimate, benign code through reflection and method invocation, as exemplified by the CommonsCollections chain. → pentesterlab.com |
| 2026-04-10 2026 | SharePoint Zero-Day CVE-2025-53770 Actively Exploited news 2 min read | Writeup detailing CVE-2025-53770, a critical zero-day vulnerability in on-premise SharePoint servers actively exploited by the "ToolShell" campaign. This vulnerability allows unauthenticated remote code execution and insecure deserialization via custom webshells parsing VIEWSTATE payloads. Attackers chain this with known Ivanti EPMM vulnerabilities like CVE-2025-4427 and CVE-2025-4428, targeting government, telecommunications, software, financial, business services, and consumer goods sectors, primarily in North America and Western Europe. Recommendations include enabling Anti-Malware Scan Interface, rotating machine keys, deploying endpoint protection, and updating Intrusion Prevention System packages. |
| 2026-04-10 2026 | SnakeYAML Deserialization Deep Dive (CVE-2022-1471) intermediate | Writeup of CVE-2022-1471 in SnakeYAML, detailing its insecure-by-default deserialization allowing RCE. This analysis covers the vulnerability's technical mechanics, the history of similar issues in SnakeYAML, and provides steps to build a vulnerable application and develop an exploit for remote code execution. |
| 2026-04-10 2026 | Docling RCE via PyYAML (CVE-2026-24009) intermediate 5 min read | Writeup of CVE-2026-24009 detailing a Docling RCE vulnerability stemming from unsafe YAML deserialization via PyYAML. This "shadow vulnerability," often hidden in transitive dependencies, allows attackers to execute arbitrary Python code by submitting malicious documents. The flaw, similar to past deserialization exploits like the ByBit heist, is only detectable at runtime, bypassing traditional static analysis and dependency checks. Oligo's CADR solution identifies and blocks these unsafe deserialization flows in real-time. |
| 2026-04-10 2026 | PyTorch Users at Risk: 3 Zero-Day PickleScan Vulnerabilities news 11 min read Python | Library for scanning PyTorch ML models, PickleScan, is vulnerable to three zero-day exploits including CVE-2025-10155, a file extension bypass. These vulnerabilities allow attackers to evade detection by masquerading malicious code within model files, potentially leading to large-scale supply chain attacks on platforms like Hugging Face. The exploits target PickleScan's parsing logic, which can be tricked by specific file extensions to skip bytecode analysis of embedded malicious Python code within pickle serialization. → jfrog.com |
| 2026-04-10 2026 | PickleBall: Secure Deserialization of Pickle-based ML Models intermediate 1 min read | Library for securely deserializing pickle-based machine learning models. PickleBall statically analyzes model source code to generate custom policies for safe load-time behavior, enforcing them dynamically as a replacement for the standard pickle module. This approach correctly loads 79.8% of benign models while rejecting all tested malicious examples, offering a significant improvement over existing model scanners and loaders. → arxiv.org |
| 2026-04-10 2026 | CVE-2026-33728: dd-trace-java Unsafe Deserialization in RMI news | CVE-2026-33728: dd-trace-java Unsafe Deserialization in RMI → advisories.gitlab.com |
| 2026-04-10 2026 | CVE-2026-33439: OpenAM Pre-Auth RCE via Deserialization news | CVE-2026-33439: OpenAM Pre-Auth RCE via Deserialization → advisories.gitlab.com |
| 2026-04-10 2026 | PayloadsAllTheThings - Ruby Deserialization Payloads intermediate 1 min read | Reference detailing Ruby deserialization vulnerabilities, including a script to generate gadget chains for Ruby 2.0-2.5. It highlights universal gadgets for Ruby versions up to 2.7.2 and 3.x, and cites specific research on RCE via YAML.load and Marshal, referencing works by Luke Jahnke, Etienne Stalmans, Colin McQueen, and PentesterLab. |
| 2026-04-10 2026 | Ruby Vulnerabilities: Exploiting Open, Send, and Deserialization intermediate 19 min read | Library for exploiting common Ruby-specific remote code execution vulnerabilities, including insecure use of the `open` function, malicious `send` or `public_send` calls, and binary deserialization gadget chains. It provides a walkthrough and a vulnerable Ruby on Rails application to demonstrate exploitation techniques found during an assessment. → bishopfox.com |
| 2026-04-10 2026 | Java Deserialization Gadget Chains Explained intermediate 13 min read | Library detailing Java deserialization exploitation, focusing on the CommonsCollections1 gadget chain from Ysoserial. It explains how `readObject()` methods trigger execution paths, the role of chained objects and transformers in controlling program flow, and specifically how the CommonsCollections1 payload leverages `LazyMap` and `ChainedTransformer` to achieve Remote Code Execution (RCE). Understanding these chains is crucial for real-world testing and developing deserialization exploits. |
| 2026-04-10 2026 | Deserialization Gadget Chains in Android: An In-Depth Study advanced 2 min read | Analysis of Java deserialization gadget chains in Android, using a novel detection tool to analyze the Android SDK and third-party libraries. The study found that the Android SDK contains trampoline gadgets similar to the Java Class Library and can trigger Java native serialization via the Parcel API. However, despite extensive testing, no security-critical gadget chains were discovered in the analyzed Android codebases, suggesting the problem is less prevalent than commonly assumed. → arxiv.org |
| 2026-04-10 2026 | What Actually Is a Deserialization Gadget Chain? beginner | What Actually Is a Deserialization Gadget Chain? |
| 2026-04-10 2026 | ysoserial: Java Deserialization Payload Generator intermediate 2 min read | Tool for generating Java deserialization payloads, ysoserial leverages gadget chains from libraries like Apache Commons Collections, Spring Beans/Core, and Groovy to exploit applications performing unsafe deserialization. It allows users to specify a command and a gadget chain, serializing the exploit for execution when deserialized by a vulnerable application. The tool supports various payload types, including CommonsCollections1, CommonsCollections4, Groovy1, and Jdk7u21, enabling academic research and defensive technique development for Java deserialization vulnerabilities. |
| 2026-04-10 2026 | ysoserial.net: Deserialization Payload Generator for .NET intermediate 18 min read | Tool for generating .NET deserialization payloads, inspired by ysoserial. ysoserial.net provides gadget chains from common .NET libraries to exploit unsafe deserialization, wrapping user-specified commands within these chains. It supports various gadget types like ActivitySurrogateDisableTypeCheck, AxHostState, and DataSet, and works with multiple formatters including BinaryFormatter, Json.NET, and SoapFormatter, enabling remote DLL loading and arbitrary code execution when vulnerable applications deserialize malicious data. |
| 2026-04-10 2026 | The Anatomy of Deserialization Attacks beginner 5 min read | Reference detailing deserialization attack techniques across PHP, Python (using pickle), Node.js, Java, and .NET. It covers how vulnerabilities arise from processing untrusted serialized data, enabling attacks like Remote Code Execution (RCE), SQL injection, and path traversal through PHP magic methods (__wakeup(), __destruct()), Python's pickle module, and Java's ObjectInputStream. Detection tools like Ysoserial, Ysoserial.net, and various Burp plugins are mentioned, alongside remediation strategies focusing on using alternative data formats like JSON/XML and deserializing only signed data. → cobalt.io |
| 2026-04-10 2026 | Marshal Madness: A Brief History of Ruby Deserialization Exploits intermediate 8 min read | Library detailing the historical evolution of Ruby Marshal deserialization exploits, from early bug tracker issues by Charlie Somerville Hailey to modern industrialized gadget discovery techniques. It traces the decade-long cycle of patches and bypasses, highlighting contributions from researchers like joernchen, Luke Jahnke, and Alex Leahu, and discusses the ongoing challenges presented by these vulnerabilities, referencing CVEs from Java and PHP as comparative examples. → blog.trailofbits.com |