We can showcase rendering / serialization vulns from newer CVEs, e.g, from parsing / rendering libraries, Markdown etc.
One example, look at the CVEs found by Catalin Iovita / Alex Postolache / https://pentest-tools.com/blog/sessionreaper-cve-2025-54236-exploit
Bref, deserialization vulns from vendor libraries.
We can showcase rendering / serialization vulns from newer CVEs, e.g, from parsing / rendering libraries, Markdown etc.
One example, look at the CVEs found by Catalin Iovita / Alex Postolache / https://pentest-tools.com/blog/sessionreaper-cve-2025-54236-exploit
Bref, deserialization vulns from vendor libraries.