Internet Bug Bounty: GMP Deserialization Type Confusion Vulnerability [MyBB <= 1.8.3 RCE Vulnerability]

GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for updating any already assigned properties of any already created objects, this result ...