portswigger 3 Insecure deserialization in Java (PortswiggerLab) Jul 24, 2021 XXE via .svg file upload Mar 19, 2020 CORS vulnerability with internal network pivot attack Mar 10, 2020