I and Harsh discovered a 0-day RCE and exploited it against Apple's Travel portal. You'll be redirected to Github for this joint blog post in 5 seconds.