Paul's Security Weekly Subscribe

Sven Morgenroth, Netsparker – Paul’s Security Weekly #584

November 30, 2018

Sven will talk about PHP Object injection vulnerabilities and explain the dangers of PHP's unserialize function. He will show the format of serialized PHP Objects, explain PHP's magic methods and how to write an exploit for a PHP Object Injection vulnerability during his technical demo. Full Show Notes: https://wiki.securityweekly.com/Episode584 To learn more about Netsparker, go to: https://www.netsparker.com/securityweekly Follow us on Twitter: https://www.twitter.com/securityweekly

Full episode and show notes

Related

Vulnerability Management

AIs in Love, UEFI, Fortinet, Godaddy, Juggalos, Aaran Leyland, and More. – SWN #443

January 17, 2025

AIs in Love, UEFI, Fortinet, Godaddy, Juggalos, Aaran Leyland, and More. In this edition of the Security Weekly News.

Incident Response

Stopping The Bad Things – PSW #857

January 17, 2025

Rob from ThreatLocker comes on the show to talk about how we can disrupt attacker techniques, including Zero Trust, privilege escalation, LOLbins, and evil virtualization. In the news we talk about security appliances and vulnerabilities, rsync vulnerabilities, Shmoocon, hacking devices, and more! This segment is sponsored by ThreatLocker. Visit h...

Boards Stepping Up, as CISOs Build Stronger Bonds with Legal and Safeguard Leadership – BSW #378

January 15, 2025

In the leadership and communications segment, New Year, New Cyber Threats: How Boards Are Stepping Up (or Not), Why CISOs should build stronger bonds with the legal function in 2025, New Managers: You Don’t Need to Know It All, and more!