One Class to Rule Them All: 0-Day Deserialization Vulnerabilities in Android [pdf]usenix.org20 pointsQUFB11 years ago