corpus.blog
42,060 blogs · 5,214,511 posts Claim your blog
Record · corpus.blog/posts/01a08c58-7231-711c-a29f-591f52337b9f

Sharing is Caring: Insecure Deserialization of Shared References in C++

TrebledJ's Pages - TrebledJ's personal blog on programming, cybersecurity, music, and memes. · published 24 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at trebledj.me Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
20
Words captured
19,911

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://thehackernews.com/2025/07/hackers-exploit-sharepoint-zero-day.html
thehackernews.com
Critical Security Vulnerability in React Server Components Read at the source ↗
react.dev
Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! Read at the source ↗
blog.orange.tw
https://nvd.nist.gov/vuln/search
nvd.nist.gov
https://web.archive.org/web/20260305120733/https://pabloariasal.github.io/2017/06/10/understanding-virtual-tables/
web.archive.org
https://stackoverflow.com/a/99341/10239789
stackoverflow.com
https://github.com/felixguendling/cista/wiki/Security
github.com
https://github.com/TheHPXProject/hpx/pull/7334
github.com
https://github.com/TrebledJ/vulnerability-research/tree/main/2025-cpp-deserialization/
github.com
https://github.com/boostorg/serialization/blob/boost-1.89.0/src/basic_iarchive.cpp
github.com
https://github.com/USCiLab/cereal/blob/v1.3.2/include/cereal/cereal.hpp
github.com
https://github.com/USCiLab/cereal/blob/v1.3.2/include/cereal/types/memory.hpp
github.com
https://github.com/fraillt/bitsery/blob/v5.2.4/include/bitsery/ext/utils/pointer_utils.h
github.com
https://github.com/fraillt/bitsery/blob/v5.2.4/include/bitsery/ext/std_smart_ptr.h
github.com
https://github.com/STEllAR-GROUP/hpx/blob/v1.11.0/libs/core/serialization/src/detail/pointer.cpp
github.com
https://github.com/STEllAR-GROUP/hpx/blob/v1.11.0/libs/core/serialization/include/hpx/serialization/detail/pointer.hpp
github.com
https://www.first.org/cvss/v3-1/user-guide
first.org
https://www.first.org/cvss/v3-1/examples
first.org
https://github.com/yaml/libyaml/issues/302
github.com
https://github.com/boostorg/serialization/pull/332
github.com
Elsewhere on trebledj.me (17)
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_party-500w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_example_serialization-1717w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_libraries-2934w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_meme_69-720w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_type_confusion-967w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_address_leak_primitive-863w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_address_leak_example-967w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_arbitrary_memory_read_primitive-912w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_vtable_hijacking_primitive-956w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_vtable-674w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_meme_very_nice-462w.webp
trebledj.me
Sharing is Caring: Arbitrary Code Execution for Breakfast Read at the source ↗
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_ownership_confusion-1050w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_double_free_primitive-1285w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_cista-1162w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_cista_self-1815w.webp
trebledj.me
https://trebledj.me/img/posts/infosec/cpp-deserialization/assets/deserialization_diagram_address_leak_primitive_rust-863w.webp
trebledj.me