web 3 Gavel HTB — From PDO SQL Injection to RCE Mar 29, 2026 Revoked & Revoked Revenge — SQLi to JWT Revocation Bypass Nov 29, 2025 NoSQL Injection — Dumping the Admin Password Jun 19, 2025