Java, Python bugs allow attackers to circumvent firewalls