Whenever I hear about vulnerabilities like these, I automatically assume that it's gonna be complicated.

But most of these revolve around very basic concepts that can be chained to deliver the attack.

It's unfortunate how developers lack the foresight to predict attack vectors in their own code.