Exploiting XMLDecoder's readObject() in ret2lib style by abusing JavaBean Persistence in XML. on September 19, 2020 deserialization java javabean readObject xml XMLDecoder +