https://zer0arc4.github.io/tags/deserialization/Recent content in Deserialization on zer0arc4Hugoen-usWed, 19 Aug 2026 00:16:04 +0530https://zer0arc4.github.io/writeups/vulnyx/visionlab-vulnyx-writeup/Wed, 19 Aug 2026 00:08:21 +0530https://zer0arc4.github.io/writeups/vulnyx/visionlab-vulnyx-writeup/Compromised the VisionLab machine by abusing an insecure PyTorch model upload, executing a malicious serialized payload through torch.load(), obtaining a reverse shell as vision, establishing SSH access, and escalating privileges through a vulnerable dmidecode configuration.