Please add

https://blunt.suprnova.cc

to the OP.

Source has no obvious exploits, i'll have a deeper look a bit later.