x.x5 bug exploitation