PunchingBag-for-React2Shellmachine-farmer/punchingbag-for-react2shellIntentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challengesctfeducationexploitation+61