BountyHunterEasy Linux box exploiting an XXE to read files and Python eval in a root ticket validator.