My first bounty on Bugcrowd - Broken OAuth Linking

How a little modification of a request parameter led to Unauthorized Access to Private Workspaces

$5K Misconfigured Reset password that leads to Account Takeover (No user Interaction ATO)