Exploiting Java Deserialization

Deserialization of untrusted data | OWASP Foundationowasp.org

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability.foxglovesec