php deserialization 3 SuiteCRM - Phar Deserialization to Code Execution May 9, 2021 OpenCATS PHP Object Injection to Arbitrary File Write Jan 16, 2021 PHP Object Injection Exploitation Notes Jan 8, 2021