From open redirect to RCE in one week | Hacker News Reader