sqli 2 Gavel HTB — From PDO SQL Injection to RCE Mar 29, 2026 Revoked & Revoked Revenge — SQLi to JWT Revocation Bypass Nov 29, 2025