authorization 2 Exploiting nOAuth Vulnerability in Azure AD Applications Oct 24, 2023 Bug Bounty - IDOR in domain of Alibaba Group - HackerOne Jun 24, 2020