J jackalsyn.com PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) 187 points rfarley04 10 days ago 62 comments