Antonio Sanso 11 Nov 15
gist of the vulnerability taken directly from presentation /(no Proxy used)