Zazastore PascalCTF 2026 Javascript Type-Confusion NaN Web NaN comparison bypass in a Node.js shopping cart.