Java Deserialization Vulnerabilities - The Forgotten Bug Class
Exploiting Deserialization Vulnerabilities in Java
Java Deserialization Vulnerabilities - The Forgotten Bug Class (RuhrSec Edition)
Java Deserialization Vulnerabilities - The Forgotten Bug Class (DeepSec Edition)