Password reset poisoning to ATO and OTP bypass

Business Logic Errors - A Logic Destruction

Bug Bounty in Lockdown (SQLi and Business Logic)