h1 2 Bug Bounty - Session Takeover in BMW Shops via XSS - HackerOne Feb 28, 2021 Bug Bounty - IDOR in domain of Alibaba Group - HackerOne Jun 24, 2020