Brutkey

cR0w
@cR0w@infosec.exchange

I missed the "two vulns, ONE app" and it was right there. sigh