http://unam.re/blog/java-deserialization-vulnerability