Deserialization leads to remote execution in Java
bit.ly