How we found exploitable zero-days in the open-source GlassFish server | Hacker News Reader