RCE 4 Nunjucks - Exploiting Second-Order SSTI Nov 5, 2025 PostgreSQL SQL injection: Updating data without UPDATE Feb 4, 2024 PostgreSQL SQL injection: SELECT only RCE Nov 20, 2023 RCE in Burp's Bambda filters Nov 16, 2023