Relive: "There's JavaScript in my power plug!" - How I found my first CVE