They found more bad vulns in cPanel / hacker news