get shell or die trying
https://github.com/veracode-research/solr-injection
A brand new vulnerability - Apache Solr Injection, as well as new ways to RCE in this innocent looking search engine.
Here is the whitepaper and the video from my presentation at DEFCON 27.