New attack! Our researcher Arseniy Sharoglazov discovered a PHPs Arbitrary Object Instantiation with no user-defined classes. It was turned to RCE! https://twitter.com/ptswarm/status/1547574555153092613 3.3K views14:01