https://blog.verichains.io/p/two-bytes-to-rce-chaining-rift-poolslipVerichainsen2026-06-06T07:33:14+00:00Two bytes to RCE: chaining rift + PoolSlip into an ASLR-independent nginx 1.30.0 exploit