$5K Misconfigured Reset password that leads to Account Takeover (No user Interaction ATO)

$500 Bounty - How a Logic Flaw Allowed Silent Logins in a Financial Application

Full-Blown SSRF to Gain Access to Millions of Users Records and Multiple Internal Panels